RHSA-2025:23203
Vulnerability from csaf_redhat - Published: 2025-12-15 15:34 - Updated: 2025-12-29 16:53Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.2 security update
Notes
Topic
Important: Red Hat OpenShift GitOps v1.18.2 security update
Details
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-7608 (Redis HA pods are taking longer than expected to come up)
* GITOPS-7789 (Version override in ArgoCD CR causes operator to use upstream images)
* GITOPS-7798 (Progress Sync Unknown in UI (cherry-pick #24202 for 3.1))
* GITOPS-7844 (GitOpsService controller creates default ArgoCD with v1alpha1 api version)
* GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)
* GITOPS-8033 (openshift-gitops-redis-ha-haproxy deployment fails to rollout with 3 worker nodes)
* GITOPS-8067 (1.18.z - Hide Dev Preview Badge in GitOps Operator's Operand tabs)
* GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)
* GITOPS-8152 (ArgoCD CR Reconciliation fails if spec.applicationSet.webhookServer.route.enabled is set to true)
Post-Upgrade Action Required: Audit GitOps Operator Roles
Following this upgrade, we strongly recommend you run the provided audit script to review namespace-scoped access.
* The script identifies Roles/RoleBindings that grant cross-namespace access for the GitOps operator's features (created via .spec.sourceNamespaces).
* Run it to verify and confirm that only the intended namespaces have cross-namespace access to deploy applications.
For more details, refer to :
- https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.18.2 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-7608 (Redis HA pods are taking longer than expected to come up)\n* GITOPS-7789 (Version override in ArgoCD CR causes operator to use upstream images)\n* GITOPS-7798 (Progress Sync Unknown in UI (cherry-pick #24202 for 3.1))\n* GITOPS-7844 (GitOpsService controller creates default ArgoCD with v1alpha1 api version)\n* GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)\n* GITOPS-8033 (openshift-gitops-redis-ha-haproxy deployment fails to rollout with 3 worker nodes)\n* GITOPS-8067 (1.18.z - Hide Dev Preview Badge in GitOps Operator\u0027s Operand tabs)\n* GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)\n* GITOPS-8152 (ArgoCD CR Reconciliation fails if spec.applicationSet.webhookServer.route.enabled is set to true)\n\nPost-Upgrade Action Required: Audit GitOps Operator Roles \n\nFollowing this upgrade, we strongly recommend you run the provided audit script to review namespace-scoped access. \n * The script identifies Roles/RoleBindings that grant cross-namespace access for the GitOps operator\u0027s features (created via .spec.sourceNamespaces). \n * Run it to verify and confirm that only the intended namespaces have cross-namespace access to deploy applications. \n\nFor more details, refer to : \n - https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles ",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23203",
"url": "https://access.redhat.com/errata/RHSA-2025:23203"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45337",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13888",
"url": "https://access.redhat.com/security/cve/CVE-2025-13888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-49844",
"url": "https://access.redhat.com/security/cve/CVE-2025-49844"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.18/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.18/"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles",
"url": "https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23203.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.2 security update",
"tracking": {
"current_release_date": "2025-12-29T16:53:37+00:00",
"generator": {
"date": "2025-12-29T16:53:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.14"
}
},
"id": "RHSA-2025:23203",
"initial_release_date": "2025-12-15T15:34:36+00:00",
"revision_history": [
{
"date": "2025-12-15T15:34:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-16T07:12:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-12-29T16:53:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.18",
"product": {
"name": "Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.18::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Aa6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Aaa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ac5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Aabf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3Ab4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Ab7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Ad95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Afbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Aee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Acae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ad88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Ac2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3Ac6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64 as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x as a component of Red Hat OpenShift GitOps 1.18",
"product_id": "Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:34:36+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23203"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2025-13888",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2025-12-02T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418361"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift-gitops-operator: OpenShift GitOps: Namespace Admin Cluster Takeover via Privileged Jobs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important instead of Critical. While full cluster compromise is possible, it requires the attacker to already possess authenticated namespace administrator credentials, reducing the attack surface to authorized internal users rather than external attackers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13888"
},
{
"category": "external",
"summary": "RHBZ#2418361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13888",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13888"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef",
"url": "https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/pull/897",
"url": "https://github.com/redhat-developer/gitops-operator/pull/897"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2",
"url": "https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2"
}
],
"release_date": "2025-12-15T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:34:36+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23203"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift-gitops-operator: OpenShift GitOps: Namespace Admin Cluster Takeover via Privileged Jobs"
},
{
"cve": "CVE-2025-49844",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-10-03T20:01:14.375087+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2401324"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution (RCE) within the Redis process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Redis: Redis Lua Use-After-Free may lead to remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability should be rated Important rather than Moderate because it introduces a memory-safety defect in Redis\u2019s Lua subsystem that can be weaponized for remote code execution (RCE). An authenticated actor with permission to run Lua can craft scripts that trigger a use-after-free in the parser/stack-management code, giving precise control over freed memory and enabling arbitrary code execution inside the redis-server process. That risk is fundamentally different from a typical moderate issue (e.g., a crash or limited denial-of-service): successful exploitation directly compromises the server runtime and all in-memory contents\u2014cached data, session tokens, and application state\u2014rather than merely disrupting service. Because Redis commonly runs with elevated privileges and is a trusted core component in application architectures, an RCE in the server process undermines confidentiality, integrity, and availability across dependent services. Authenticated attackability, trivial exploitation via standard commands (EVAL/EVALSHA), and the potential for full-process compromise elevate CVE-2025-49844 to Important severity.\n\nThis flaw exists only in the Redis server implementation; \n\nRedis client libraries (Python, Node.js, Rust, etc.) are not affected by this vulnerability, and it only exists in the Redis server\u2019s embedded Lua engine where scripts execute. Client libraries merely transmit EVAL/EVALSHA to the server.\n\n\nRed Hat Satellite does not ship the Redis server, and the Redis client libraries it includes (such as python-redis, python-aioredis and rubygem-redis) are not impacted by this vulnerability. While Satellite consume the Redis package from the underlying RHEL system, which is affected, the Redis service in Satellite is bound only to the local interface and is accessible solely by internal components like Pulp and Dynflow. Since vulnerability requires sending crafted Lua payloads to the Redis command interface, and no external or untrusted clients can connect, the effective exposure within Satellite is nullified.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-49844"
},
{
"category": "external",
"summary": "RHBZ#2401324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2401324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-49844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49844"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-49844",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49844"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539",
"url": "https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.2.2",
"url": "https://github.com/redis/redis/releases/tag/8.2.2"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q",
"url": "https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q"
},
{
"category": "external",
"summary": "https://redis.io/blog/security-advisory-cve-2025-49844/",
"url": "https://redis.io/blog/security-advisory-cve-2025-49844/"
}
],
"release_date": "2025-10-03T19:27:23.609000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:34:36+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23203"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.\n\nTo reduce the risk, restricting network access to trusted hosts, enforcing strong authentication and protected-mode, disabling or limiting Lua scripting where possible can be beneficial and apply least-privilege ACLs to reduce who can run scripting commands, keep instances non-public with firewalls/VPCs, and follow Redis hardening guidance to minimize exposure.",
"product_ids": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:217cfb3efa9a3514fec28db7c812c723c0d490b2653920f690e89bec64bb8a17_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:2d7214b91d8954376fa3739b5d0a856f0124a62e2cd135bbe0a2fd741efed1a9_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:87a36dcde955efb54ab113d5696d2eed8d6f0f34dad48303abd2fbb00b5d0265_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:fbdcd572a787c37403839d12ec627f371731b55bf665558e9621dbc6951e2df1_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:421639cedef9b144be97d27d1fdfa46d7fe9f01611a9625656868ca7a4d5ce11_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:7adcbe9c60d6a10435ae86fe475241148621b9375866125cc35a9ad889886b38_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:8a904ab9ff98789f9a7d1ccb93f1d5696ec60386240655963fe9268922924ef6_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:ee50a4291ea3401f1c4739b554b100815c51191f8bfbee60cccfc7df7830c8aa_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:012098b3e2a9d10ad6b10bbfe8c79d60202b514395b7ee1f63586c6ebd399e34_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:36846a0a80043b3047d361b3114c65e7dd8bcedf7f296f8d58b872b0f34c2aa8_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:453961c36353116685d096503997af51b5551327e58060142c6cc8e519593179_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:aa1f6651fe44e8954ec4ff9e54e30cd1567a79f264f1ac2655190aa3507c2600_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:2c803534984353a1fffb3cb6dc1cc060bb49a777eff5d29ab73e886aa9c7ad9e_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:3759356a7e66dc3ded63c8df2fdaaa425621ea26aebb4ecbdab38398b1b8287e_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:63a009eef474539e273c2aedbd50cdb160bcff8ef6ece067a5d9a492b17c7e42_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:a6cc862075088ed8fa87795ec7f04f232758f7ac198659edf1f2e31218380cf9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:1ce4994bf13f82da293b7fe2829302951f812cc09139434dc06e492e0f8e5cb8_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:4620ae80d5890bcb11b2ca68e0dbfe5a0ab40f86a24bbad83bba0391309131b1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:59655061ef913aba1fef47291bc95ebd598812f4cf9dbd165023ae6e4cd2460a_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cae46a1af7b4e0a13a66af872fd656c204518346ef98ae8c9d6f3294835d3ff7_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:971658bc181b91230bd0f0b276f85a23f805f08453cebe759b3ac37adca97cae_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9f1f1898a1af86a86b754e43a5a3079a6d8e1fbfd3073080d35e6a8d218a00af_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c5a08b7d120931634b936e68f443fbe4514856c54c862c6997d745610d4bf972_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:d88efca7559feab0c82f074424dd80a43119ecb4a7d23d70ee17209268b125cc_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:3856ceed1bf6b88c09795ca077d14a73ef4b2a4383a84055e8fe56185219b7d0_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:921b4cf740762622bbb48ffed32fa97e8bb4d835b892d6a5dfcba4369cae544f_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:b7ca78bf9690524383e4d68f06a0a48f79f9bd171c4d7ebf7ceba79fc239217f_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:c2a3ff3f39e40893d8e1205acffe05cfcfa89e3dd8407d4ca06600de4893f5b9_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:b4d6b30d562e1cacbb1ca461e8c14b95c0d42be1baf876599c446669f2584feb_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:1e382dc8429f5224c1e353f08d99af1be092d960b0d9f98db495aeee314ff510_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:3eb6308c58365182b4b5b5aabf35754d821e25b8a04b0595900fb47d52cd3ecc_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:5df1b2770060850ad5abbdfe384ce5f3232c73d50b3ea2110e437eae46093e27_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:7f6e588459ff59366a9f8f8f32a784806af11931f8584e46e1d53472a2e010a9_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:3cb7efbe816489b5eb6cda04af94a5b4943ab5a05d5e6bded8ced857fd40bee2_s390x",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5aa0395f8654f9007f726779cbbf76a7855e8b4882bdd0b5fc9c850aa12b698b_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:abf1a5df77bd393d1503748193949167598ed3e70b665e91405ffca05b5c93c1_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d95248223d597f869bcc55badb7b363b1d7dd6069b0fee1f630d03ba1a7c5693_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:26f0eec0b11eb4a962f7b70a71a91a85b9be0c5aa42f289ce5461d29fb5e5667_amd64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3191b98bc850c708f4ba1114a784a9e50ef44a3d91546d728c90a401757f2255_arm64",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:44ccb3825181abbce53616c081b476ee18cfec60947da234b4a8c88587ae9493_ppc64le",
"Red Hat OpenShift GitOps 1.18:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:c6fa8f9c0fdf95f13ac53cf5d729a4e1a03d7a038bfd7c5aa27cdddca407cc43_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Redis: Redis Lua Use-After-Free may lead to remote code execution"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…