{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Service Mesh Containers for 2.4.8\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Service Mesh is Red Hat\u0027s distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation.\n\nSecurity Fix(es):\n\n* golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:3680",
        "url": "https://access.redhat.com/errata/RHSA-2024:3680"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2268273",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268273"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_3680.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.8 security update",
    "tracking": {
      "current_release_date": "2024-09-18T22:49:32+00:00",
      "generator": {
        "date": "2024-09-18T22:49:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.33.3"
        }
      },
      "id": "RHSA-2024:3680",
      "initial_release_date": "2024-06-06T11:58:23+00:00",
      "revision_history": [
        {
          "date": "2024-06-06T11:58:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-06-06T11:58:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-09-18T22:49:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHOSSM 2.4 for RHEL 8",
                "product": {
                  "name": "RHOSSM 2.4 for RHEL 8",
                  "product_id": "8Base-RHOSSM-2.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:service_mesh:2.4::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Service Mesh"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
                "product": {
                  "name": "openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
                  "product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.4.8-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
                "product": {
                  "name": "openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
                  "product_id": "openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
                "product": {
                  "name": "openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
                  "product_id": "openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.65.11-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
                "product": {
                  "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
                  "product_id": "openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel8\u0026tag=2.4.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
                "product": {
                  "name": "openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
                  "product_id": "openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x",
                "product": {
                  "name": "openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x",
                  "product_id": "openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/prometheus-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
                "product": {
                  "name": "openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
                  "product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
                "product": {
                  "name": "openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
                  "product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.4.8-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
                "product": {
                  "name": "openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
                  "product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.4.8-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
                "product": {
                  "name": "openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
                  "product_id": "openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
                "product": {
                  "name": "openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
                  "product_id": "openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.65.11-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
                "product": {
                  "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
                  "product_id": "openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel8\u0026tag=2.4.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
                "product": {
                  "name": "openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
                  "product_id": "openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
                "product": {
                  "name": "openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
                  "product_id": "openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/prometheus-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
                "product": {
                  "name": "openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
                  "product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64",
                "product": {
                  "name": "openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64",
                  "product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.4.8-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
                  "product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.4.8-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
                  "product_id": "openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
                  "product_id": "openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.65.11-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
                  "product_id": "openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel8\u0026tag=2.4.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
                  "product_id": "openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
                  "product_id": "openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/prometheus-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
                  "product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
                "product": {
                  "name": "openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
                  "product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.4.8-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
                "product": {
                  "name": "openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
                  "product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.4.8-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
                "product": {
                  "name": "openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
                  "product_id": "openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
                "product": {
                  "name": "openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
                  "product_id": "openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.65.11-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
                "product": {
                  "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
                  "product_id": "openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel8\u0026tag=2.4.8-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
                "product": {
                  "name": "openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
                  "product_id": "openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
                "product": {
                  "name": "openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
                  "product_id": "openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/prometheus-rhel8\u0026tag=2.4.8-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
                "product": {
                  "name": "openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
                  "product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.4.8-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
                "product": {
                  "name": "openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
                  "product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.4.8-5"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x"
        },
        "product_reference": "openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le"
        },
        "product_reference": "openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64"
        },
        "product_reference": "openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64"
        },
        "product_reference": "openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64"
        },
        "product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64"
        },
        "product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le"
        },
        "product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x"
        },
        "product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64"
        },
        "product_reference": "openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le"
        },
        "product_reference": "openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64"
        },
        "product_reference": "openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x"
        },
        "product_reference": "openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64"
        },
        "product_reference": "openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x"
        },
        "product_reference": "openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le"
        },
        "product_reference": "openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64"
        },
        "product_reference": "openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x"
        },
        "product_reference": "openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64"
        },
        "product_reference": "openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le"
        },
        "product_reference": "openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64"
        },
        "product_reference": "openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64"
        },
        "product_reference": "openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le"
        },
        "product_reference": "openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64"
        },
        "product_reference": "openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x"
        },
        "product_reference": "openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x"
        },
        "product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64"
        },
        "product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64"
        },
        "product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le"
        },
        "product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x"
        },
        "product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64"
        },
        "product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le"
        },
        "product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64 as a component of RHOSSM 2.4 for RHEL 8",
          "product_id": "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64"
        },
        "product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64",
        "relates_to_product_reference": "8Base-RHOSSM-2.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Bartek Nowotarski"
          ],
          "organization": "nowotarski.info"
        }
      ],
      "cve": "CVE-2023-45288",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2024-03-06T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2268273"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates the security impact of this vulnerability as Important due to the worst case scenario resulting in a denial of service. It is simple to exploit, could significantly impact availability, and there is not a suitable mitigation for all use cases. Once an attack has ended, the system should return to normal operations on its own.\n\nThis vulnerability only impacts servers which have HTTP/2 enabled. It stems from an imperfect definition of the protocol. As the Go programming language is widely utilized across nearly every major Red Hat offering, a full listing of impacted packages will not be provided. Therefore, the \u201cAffected Packages and Issued Red Hat Security Errata\u201d section contains a simplified list of what offerings need to remediate this vulnerability. Every impacted offering has at least one representative component listed, but potentially not all of them. Rest assured that Red Hat is committed to remediating this vulnerability across our entire portfolio.\n\nMany components are rated as Low impact due to configurations which reduce the attack surface or  significantly increase the difficulty of exploitation. A summary of these scenarios are:\n* The container includes a package that provides a vulnerable webserver, but it is not used or running during operation\n* HTTP/2 is disabled by default and is not supported\n* Only a client implementation is provided, which is not vulnerable\n* A vulnerable module (either golang.org/net/http or golang.org/x/net/http2) is included, but disabled\n* Access to a vulnerable server is restricted within the container (loopback only connections)\n* Golang is available in the container but is not used\n\n\nWithin the Red Hat OpenShift Container Platform, the majority of vulnerable components are not externally accessible. This means an attacker must already have access to a container within your environment to exploit this vulnerability. However, the ose-hyperkube (openshift-enterprise-hyperkube) container is externally accessible, so there are less barriers to exploitation. Fixes for this specific container are already available.\n\nWithin Red Hat Ansible Automation Platform, the impacted component is Receptor. The impact has been reduced to Low as the vulnerable code is present, but not utilized. There are three potential exposures within this component:\n* Receptor utilizes QUIC a UDP based protocol which does not run over HTTP/2\n* Receptor utilizes the x/net/ipv4 and ipv6 packages, both of which are not affected",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x"
        ],
        "known_not_affected": [
          "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
          "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
          "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
          "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-45288"
        },
        {
          "category": "external",
          "summary": "RHBZ#2268273",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268273"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-45288",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-45288"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45288",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45288"
        },
        {
          "category": "external",
          "summary": "https://nowotarski.info/http2-continuation-flood/",
          "url": "https://nowotarski.info/http2-continuation-flood/"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-2687",
          "url": "https://pkg.go.dev/vuln/GO-2024-2687"
        },
        {
          "category": "external",
          "summary": "https://www.kb.cert.org/vuls/id/421644",
          "url": "https://www.kb.cert.org/vuls/id/421644"
        }
      ],
      "release_date": "2024-04-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:3680"
        },
        {
          "category": "workaround",
          "details": "In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.",
          "product_ids": [
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:0e955cc01c93bbc46266780fd09b6a4587002202a3bf5a4efb589755f4fcc4b0_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:46fdfa161b0729c45aaa032ff9b4b271fef9127bb9acc00c96c9d99cf4b0ce9f_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:a3bb5c51d37acad8ca8b79c65db4802a0f45ef55837e2ea2fe37ad5bdbe83209_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/grafana-rhel8@sha256:ff0d832886cb3a27aa6388e08b3083b1a1bb8843cc40bef60da29079971c4942_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:07051d6eaeb948a47f27f5b2f8f626371ca818e2ce908a34dfbd849b3a54df85_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:1e4ec039f046fb633bdea3c2a41b949cd240f205f1d8c54cadaae6038b68a95b_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:c3fc58490b6df89c05518127c47a8171891f12e696776878047bca65fa853603_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-cni-rhel8@sha256:e618e1ba446211a227176d6d688c15f38823c0b91f93eaa5c23e64efafdc185d_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:5ba929ac6c543195cfa2c040d0b462cac1bda021541aac9d1d3f7bf1778b60a4_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:84c5124286c202d16ac43d3bf1a3a6934f46095cd6b9ac1bbb105639569d9782_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:88713f86a767b31a5bbc06a166b6fc2fbcbebd993fa6a661e6aaaa8feea8e112_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/istio-must-gather-rhel8@sha256:fe8b8162c68ad8c3e0ca7c61941cd18419cf41bda0afda7451c83a1be2528c51_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:0656ba8c53571b3f6f2a7d3edfe24c7e0ffd470f266f9a2047a638c2a9ce6bf1_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:1b2f64166729c8a5b60d7e6eff5a8566c1b1a0809dae95d304769a8823203d76_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:586b1b34b5164306c62c1372bbf666e254183055edf355c676c54e0144094555_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/kiali-rhel8@sha256:d5864a73a82fc6029cbc94bb64d12e09f10945d1e1769c5456a4f304bb3d3ada_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:4d4a777974f068d538589cb5bed9ed21ce98038a682548e321f1beefdc55776e_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:627bacea3ea3ec3b09ff3c60f85e4999223386fda05c013bcab81cff5b4040ba_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:ce61048850e09a80a88a2a515d7cb9420ed843dc063b3fdb06bf58b399709fe1_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/pilot-rhel8@sha256:f820a27e5fcb15c24a5cde48d0cc0c7ed397513cacc4678872d9009d83584387_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:3fac99ca767649b893ab9096394942eac585a1e9f90d97734c67030792c1492a_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5094ff524a15ec33feb8ed80bf444907dacc1920d2b0ae0297975bd19e5eac90_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:5bd8061225ceaba7191351806531e76da9955fa1cbfd384d9988424f9622f59d_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/proxyv2-rhel8@sha256:65eec2ccdb679ba214033dfd47e06333045089daf3f13ce5bd997fd542a14afb_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:9c0cd79982a5fca5dad6a098f8176d717856c5a1cac740562a522811359e0ad8_s390x",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:a384fd5773eaed50640d9c9ac463ffb34dc5022b8ec9a4d111ce598397064e19_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:b808268ee362145269e5f2420e2a0e05897660766e8f2ecc45aacfdc17e9eb4d_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/ratelimit-rhel8@sha256:fda3a77251f028df047f1e5d433ac7992b613bd824edcf3130cd91b10d7bd1ec_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:1df4efcf6677bab8fac4cc82cc19687d78eb0fdc12dcff0b71a5c4e9400a6211_amd64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:b0b389a9ee14fbe748a6c5c96f6c4cc1462958f4a923af4de26c8ab4d4defcad_ppc64le",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:e7607f4c476972bdab679380d3445d5fce52c1c9a152dc2f2c8d05bd2639af43_arm64",
            "8Base-RHOSSM-2.4:openshift-service-mesh/prometheus-rhel8@sha256:ea0f149a53f861c3d587e0628987cf7ebe64a402dbda07c22eacb32eb1f6833e_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS"
    }
  ]
}