rhsa-2024_2096
Vulnerability from csaf_redhat
Published
2024-05-01 07:37
Modified
2024-11-07 02:04
Summary
Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.1
Notes
Topic
Moderate: Logging for Red Hat OpenShift - 5.9.1
Details
Logging for Red Hat OpenShift - 5.9.1
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Moderate: Logging for Red Hat OpenShift - 5.9.1", "title": "Topic" }, { "category": "general", "text": "Logging for Red Hat OpenShift - 5.9.1", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:2096", "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "LOG-4672", "url": "https://issues.redhat.com/browse/LOG-4672" }, { "category": "external", "summary": "LOG-5062", "url": "https://issues.redhat.com/browse/LOG-5062" }, { "category": "external", "summary": "LOG-5268", "url": "https://issues.redhat.com/browse/LOG-5268" }, { "category": "external", "summary": "LOG-5278", "url": "https://issues.redhat.com/browse/LOG-5278" }, { "category": "external", "summary": "LOG-5307", "url": "https://issues.redhat.com/browse/LOG-5307" }, { "category": "external", "summary": "LOG-5309", "url": "https://issues.redhat.com/browse/LOG-5309" }, { "category": "external", "summary": "LOG-5322", "url": "https://issues.redhat.com/browse/LOG-5322" }, { "category": "external", "summary": "LOG-5323", "url": "https://issues.redhat.com/browse/LOG-5323" }, { "category": "external", "summary": "LOG-5395", "url": "https://issues.redhat.com/browse/LOG-5395" }, { "category": "external", "summary": "LOG-5397", "url": "https://issues.redhat.com/browse/LOG-5397" }, { "category": "external", "summary": "LOG-5401", "url": "https://issues.redhat.com/browse/LOG-5401" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2096.json" } ], "title": "Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.1", "tracking": { "current_release_date": "2024-11-07T02:04:37+00:00", "generator": { "date": "2024-11-07T02:04:37+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2024:2096", "initial_release_date": "2024-05-01T07:37:52+00:00", "revision_history": [ { "date": "2024-05-01T07:37:52+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-05-01T07:37:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-07T02:04:37+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "RHOL 5.9 for RHEL 9", "product": { "name": "RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9", "product_identification_helper": { "cpe": "cpe:/a:redhat:logging:5.9::el9" } } } ], "category": "product_family", "name": "logging for Red Hat OpenShift" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "product": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17" } } }, { "category": "product_version", "name": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "product": { "name": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.9.1-32" } } }, { "category": "product_version", "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "product": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "product_identification_helper": { "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "product": { "name": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "product_id": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "product": { "name": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "product_id": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "product": { "name": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "product_id": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "product_identification_helper": { "purl": "pkg:oci/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12" } } }, { "category": "product_version", "name": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "product": { "name": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "product_id": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "product_identification_helper": { "purl": "pkg:oci/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4" } } }, { "category": "product_version", "name": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "product": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "product_identification_helper": { "purl": "pkg:oci/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2" } } }, { "category": "product_version", "name": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "product": { "name": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "product_id": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "product_identification_helper": { "purl": "pkg:oci/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=v5.9.1-10" } } }, { "category": "product_version", "name": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "product": { "name": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "product_id": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "product_identification_helper": { "purl": "pkg:oci/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "product": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "product_identification_helper": { "purl": "pkg:oci/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520" } } }, { "category": "product_version", "name": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "product": { "name": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "product_id": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "product_identification_helper": { "purl": "pkg:oci/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "product": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17" } } }, { "category": "product_version", "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "product": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "product_identification_helper": { "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "product": { "name": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "product_id": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "product": { "name": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "product_id": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "product": { "name": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "product_id": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "product_identification_helper": { "purl": "pkg:oci/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12" } } }, { "category": "product_version", "name": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64", "product": { "name": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64", "product_id": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64", "product_identification_helper": { "purl": "pkg:oci/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4" } } }, { "category": "product_version", "name": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "product": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "product_identification_helper": { "purl": "pkg:oci/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2" } } }, { "category": "product_version", "name": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "product": { "name": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "product_id": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "product_identification_helper": { "purl": "pkg:oci/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "product": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "product_identification_helper": { "purl": "pkg:oci/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520" } } }, { "category": "product_version", "name": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "product": { "name": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "product_id": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "product_identification_helper": { "purl": "pkg:oci/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "product": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17" } } }, { "category": "product_version", "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "product": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "product_identification_helper": { "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "product": { "name": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "product_id": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "product": { "name": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "product_id": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "product": { "name": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "product_id": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "product_identification_helper": { "purl": "pkg:oci/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12" } } }, { "category": "product_version", "name": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "product": { "name": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "product_id": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "product_identification_helper": { "purl": "pkg:oci/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4" } } }, { "category": "product_version", "name": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "product": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "product_identification_helper": { "purl": "pkg:oci/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2" } } }, { "category": "product_version", "name": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "product": { "name": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "product_id": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "product_identification_helper": { "purl": "pkg:oci/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "product": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "product_identification_helper": { "purl": "pkg:oci/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520" } } }, { "category": "product_version", "name": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "product": { "name": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "product_id": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "product_identification_helper": { "purl": "pkg:oci/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "product": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17" } } }, { "category": "product_version", "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "product": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "product_identification_helper": { "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "product": { "name": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "product_id": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "product": { "name": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "product_id": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "product": { "name": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "product_id": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "product_identification_helper": { "purl": "pkg:oci/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12" } } }, { "category": "product_version", "name": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "product": { "name": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "product_id": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "product_identification_helper": { "purl": "pkg:oci/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4" } } }, { "category": "product_version", "name": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "product": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "product_identification_helper": { "purl": "pkg:oci/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2" } } }, { "category": "product_version", "name": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "product": { "name": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "product_id": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "product_identification_helper": { "purl": "pkg:oci/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5" } } }, { "category": "product_version", "name": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "product": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "product_identification_helper": { "purl": "pkg:oci/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520" } } }, { "category": "product_version", "name": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "product": { "name": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "product_id": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "product_identification_helper": { "purl": "pkg:oci/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64" }, "product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le" }, "product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x" }, "product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64" }, "product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64" }, "product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64" }, "product_reference": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x" }, "product_reference": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64" }, "product_reference": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le" }, "product_reference": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64" }, "product_reference": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64" }, "product_reference": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x" }, "product_reference": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le" }, "product_reference": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64" }, "product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le" }, "product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x" }, "product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64" }, "product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le" }, "product_reference": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64" }, "product_reference": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x" }, "product_reference": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" }, "product_reference": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le" }, "product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64" }, "product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x" }, "product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64" }, "product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64" }, "product_reference": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le" }, "product_reference": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64" }, "product_reference": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64" }, "product_reference": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x" }, "product_reference": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le" }, "product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x" }, "product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64" }, "product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" }, "product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le" }, "product_reference": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64" }, "product_reference": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x" }, "product_reference": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64" }, "product_reference": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le" }, "product_reference": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64" }, "product_reference": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x" }, "product_reference": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "relates_to_product_reference": "9Base-RHOL-5.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64 as a component of RHOL 5.9 for RHEL 9", "product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" }, "product_reference": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64", "relates_to_product_reference": "9Base-RHOL-5.9" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-45289", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2024-03-05T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2268018" } ], "notes": [ { "category": "description", "text": "A flaw was found in Go\u0027s net/http/cookiejar standard library package. When following an HTTP redirect to a domain that is not a subdomain match or an exact match of the initial domain, an http.Client does not forward sensitive headers such as \"Authorization\" or \"Cookie\". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "known_not_affected": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-45289" }, { "category": "external", "summary": "RHBZ#2268018", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268018" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-45289", "url": "https://www.cve.org/CVERecord?id=CVE-2023-45289" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45289", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45289" } ], "release_date": "2024-03-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-05-01T07:37:52+00:00", "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect" }, { "cve": "CVE-2023-45290", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2024-03-05T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2268017" } ], "notes": [ { "category": "description", "text": "A flaw was discovered in Go\u0027s net/http standard library package. When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "known_not_affected": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-45290" }, { "category": "external", "summary": "RHBZ#2268017", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268017" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-45290", "url": "https://www.cve.org/CVERecord?id=CVE-2023-45290" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4", "url": "http://www.openwall.com/lists/oss-security/2024/03/08/4" }, { "category": "external", "summary": "https://go.dev/cl/569341", "url": "https://go.dev/cl/569341" }, { "category": "external", "summary": "https://go.dev/issue/65383", "url": "https://go.dev/issue/65383" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg", "url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2024-2599", "url": "https://pkg.go.dev/vuln/GO-2024-2599" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240329-0004", "url": "https://security.netapp.com/advisory/ntap-20240329-0004" } ], "release_date": "2024-03-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-05-01T07:37:52+00:00", "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm" }, { "cve": "CVE-2024-24783", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2024-03-05T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2268019" } ], "notes": [ { "category": "description", "text": "A flaw was found in Go\u0027s crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "known_not_affected": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-24783" }, { "category": "external", "summary": "RHBZ#2268019", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268019" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24783", "url": "https://www.cve.org/CVERecord?id=CVE-2024-24783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4", "url": "http://www.openwall.com/lists/oss-security/2024/03/08/4" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp", "url": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp" }, { "category": "external", "summary": "https://go.dev/cl/569339", "url": "https://go.dev/cl/569339" }, { "category": "external", "summary": "https://go.dev/issue/65390", "url": "https://go.dev/issue/65390" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg", "url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2024-2598", "url": "https://pkg.go.dev/vuln/GO-2024-2598" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240329-0005", "url": "https://security.netapp.com/advisory/ntap-20240329-0005" } ], "release_date": "2024-03-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-05-01T07:37:52+00:00", "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm" }, { "cve": "CVE-2024-24785", "cwe": { "id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)" }, "discovery_date": "2024-03-05T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2268022" } ], "notes": [ { "category": "description", "text": "A flaw was found in Go\u0027s html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into templates.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: html/template: errors returned from MarshalJSON methods may break template escaping", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "known_not_affected": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-24785" }, { "category": "external", "summary": "RHBZ#2268022", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268022" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24785", "url": "https://www.cve.org/CVERecord?id=CVE-2024-24785" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24785", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24785" }, { "category": "external", "summary": "https://go.dev/cl/564196", "url": "https://go.dev/cl/564196" }, { "category": "external", "summary": "https://go.dev/issue/65697", "url": "https://go.dev/issue/65697" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg", "url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg" }, { "category": "external", "summary": "https://vuln.go.dev/ID/GO-2024-2610.json", "url": "https://vuln.go.dev/ID/GO-2024-2610.json" } ], "release_date": "2024-03-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-05-01T07:37:52+00:00", "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: html/template: errors returned from MarshalJSON methods may break template escaping" }, { "cve": "CVE-2024-24786", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2024-03-06T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2268046" } ], "notes": [ { "category": "description", "text": "A flaw was found in Golang\u0027s protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" ], "known_not_affected": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-24786" }, { "category": "external", "summary": "RHBZ#2268046", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24786", "url": "https://www.cve.org/CVERecord?id=CVE-2024-24786" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786" }, { "category": "external", "summary": "https://go.dev/cl/569356", "url": "https://go.dev/cl/569356" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/", "url": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2024-2611", "url": "https://pkg.go.dev/vuln/GO-2024-2611" } ], "release_date": "2024-03-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-05-01T07:37:52+00:00", "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON" }, { "cve": "CVE-2024-28180", "cwe": { "id": "CWE-409", "name": "Improper Handling of Highly Compressed Data (Data Amplification)" }, "discovery_date": "2024-03-10T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2268854" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Jose due to improper handling of highly compressed data. This issue could allow an attacker to send a JWE containing compressed data that uses large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti.", "title": "Vulnerability description" }, { "category": "summary", "text": "jose-go: improper handling of highly compressed data", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" ], "known_not_affected": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-28180" }, { "category": "external", "summary": "RHBZ#2268854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268854" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-28180", "url": "https://www.cve.org/CVERecord?id=CVE-2024-28180" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28180", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28180" }, { "category": "external", "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g", "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g" } ], "release_date": "2024-03-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-05-01T07:37:52+00:00", "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:2096" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64", "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64", "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x", "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x", "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x", "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x", "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64", "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64", "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x", "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x", "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64", "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jose-go: improper handling of highly compressed data" } ] }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.