RHSA-2025:23206
Vulnerability from csaf_redhat - Published: 2025-12-15 15:39 - Updated: 2025-12-28 16:41Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.3 security update
Notes
Topic
Important: Red Hat OpenShift GitOps v1.17.3 security update
Details
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-8116 (CVE-2024-45338 openshift-gitops-dex-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [gitops-1.17])
* GITOPS-7608 (Redis HA pods are taking longer than expected to come up)
* GITOPS-7789 (Version override in ArgoCD CR causes operator to use upstream images)
* GITOPS-7844 (GitOpsService controller creates default ArgoCD with v1alpha1 api version)
* GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)
* GITOPS-8033 (openshift-gitops-redis-ha-haproxy deployment fails to rollout with 3 worker nodes)
* GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)
* GITOPS-8152 (ArgoCD CR Reconciliation fails if spec.applicationSet.webhookServer.route.enabled is set to true)
Post-Upgrade Action Required: Audit GitOps Operator Roles
Following this upgrade, we strongly recommend you run the provided audit script to review namespace-scoped access.
* The script identifies Roles/RoleBindings that grant cross-namespace access for the GitOps operator's features (created via .spec.sourceNamespaces).
* Run it to verify and confirm that only the intended namespaces have cross-namespace access to deploy applications.
For more details, refer to :
- https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.17.3 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-8116 (CVE-2024-45338 openshift-gitops-dex-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [gitops-1.17])\n* GITOPS-7608 (Redis HA pods are taking longer than expected to come up)\n* GITOPS-7789 (Version override in ArgoCD CR causes operator to use upstream images)\n* GITOPS-7844 (GitOpsService controller creates default ArgoCD with v1alpha1 api version)\n* GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)\n* GITOPS-8033 (openshift-gitops-redis-ha-haproxy deployment fails to rollout with 3 worker nodes)\n* GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)\n* GITOPS-8152 (ArgoCD CR Reconciliation fails if spec.applicationSet.webhookServer.route.enabled is set to true)\n\nPost-Upgrade Action Required: Audit GitOps Operator Roles \n\nFollowing this upgrade, we strongly recommend you run the provided audit script to review namespace-scoped access. \n * The script identifies Roles/RoleBindings that grant cross-namespace access for the GitOps operator\u0027s features (created via .spec.sourceNamespaces). \n * Run it to verify and confirm that only the intended namespaces have cross-namespace access to deploy applications. \n\nFor more details, refer to : \n - https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles ",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23206",
"url": "https://access.redhat.com/errata/RHSA-2025:23206"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45337",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13888",
"url": "https://access.redhat.com/security/cve/CVE-2025-13888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-49844",
"url": "https://access.redhat.com/security/cve/CVE-2025-49844"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.17/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.17/"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles",
"url": "https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23206.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.3 security update",
"tracking": {
"current_release_date": "2025-12-28T16:41:40+00:00",
"generator": {
"date": "2025-12-28T16:41:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.14"
}
},
"id": "RHSA-2025:23206",
"initial_release_date": "2025-12-15T15:39:18+00:00",
"revision_history": [
{
"date": "2025-12-15T15:39:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-16T07:12:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-12-28T16:41:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.17",
"product": {
"name": "Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.17::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Acf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Aed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Ab3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Aa4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3Ae1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3Afd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Aa120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3A090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Af602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Aef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Aa6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Af7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3Ab2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Af43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Aebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-agent-rhel8@sha256%3Afbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Aa3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ac4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Abc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64 as a component of Red Hat OpenShift GitOps 1.17",
"product_id": "Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:39:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23206"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:39:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23206"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2025-13888",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2025-12-02T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418361"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift-gitops-operator: OpenShift GitOps: Namespace Admin Cluster Takeover via Privileged Jobs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important instead of Critical. While full cluster compromise is possible, it requires the attacker to already possess authenticated namespace administrator credentials, reducing the attack surface to authorized internal users rather than external attackers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13888"
},
{
"category": "external",
"summary": "RHBZ#2418361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13888",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13888"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef",
"url": "https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/pull/897",
"url": "https://github.com/redhat-developer/gitops-operator/pull/897"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2",
"url": "https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2"
}
],
"release_date": "2025-12-15T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:39:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23206"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift-gitops-operator: OpenShift GitOps: Namespace Admin Cluster Takeover via Privileged Jobs"
},
{
"cve": "CVE-2025-49844",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-10-03T20:01:14.375087+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2401324"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution (RCE) within the Redis process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Redis: Redis Lua Use-After-Free may lead to remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability should be rated Important rather than Moderate because it introduces a memory-safety defect in Redis\u2019s Lua subsystem that can be weaponized for remote code execution (RCE). An authenticated actor with permission to run Lua can craft scripts that trigger a use-after-free in the parser/stack-management code, giving precise control over freed memory and enabling arbitrary code execution inside the redis-server process. That risk is fundamentally different from a typical moderate issue (e.g., a crash or limited denial-of-service): successful exploitation directly compromises the server runtime and all in-memory contents\u2014cached data, session tokens, and application state\u2014rather than merely disrupting service. Because Redis commonly runs with elevated privileges and is a trusted core component in application architectures, an RCE in the server process undermines confidentiality, integrity, and availability across dependent services. Authenticated attackability, trivial exploitation via standard commands (EVAL/EVALSHA), and the potential for full-process compromise elevate CVE-2025-49844 to Important severity.\n\nThis flaw exists only in the Redis server implementation; \n\nRedis client libraries (Python, Node.js, Rust, etc.) are not affected by this vulnerability, and it only exists in the Redis server\u2019s embedded Lua engine where scripts execute. Client libraries merely transmit EVAL/EVALSHA to the server.\n\n\nRed Hat Satellite does not ship the Redis server, and the Redis client libraries it includes (such as python-redis, python-aioredis and rubygem-redis) are not impacted by this vulnerability. While Satellite consume the Redis package from the underlying RHEL system, which is affected, the Redis service in Satellite is bound only to the local interface and is accessible solely by internal components like Pulp and Dynflow. Since vulnerability requires sending crafted Lua payloads to the Redis command interface, and no external or untrusted clients can connect, the effective exposure within Satellite is nullified.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-49844"
},
{
"category": "external",
"summary": "RHBZ#2401324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2401324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-49844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49844"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-49844",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49844"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539",
"url": "https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.2.2",
"url": "https://github.com/redis/redis/releases/tag/8.2.2"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q",
"url": "https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q"
},
{
"category": "external",
"summary": "https://redis.io/blog/security-advisory-cve-2025-49844/",
"url": "https://redis.io/blog/security-advisory-cve-2025-49844/"
}
],
"release_date": "2025-10-03T19:27:23.609000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:39:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23206"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.\n\nTo reduce the risk, restricting network access to trusted hosts, enforcing strong authentication and protected-mode, disabling or limiting Lua scripting where possible can be beneficial and apply least-privilege ACLs to reduce who can run scripting commands, keep instances non-public with firewalls/VPCs, and follow Redis hardening guidance to minimize exposure.",
"product_ids": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:8c3785cd1c2aabe85c1f447a82583c56860f6a88ad108985338d334cd29e187d_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:a120d2036e7647b266f5cb1caa22f08a6e7c7241ab4073461fd61fdc51a43e4c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:cf7438a5cf8a56eb937cf7a7e6fbd0430837b5e9376c4ad1c1ea44ae8c35c3a4_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:ebd9f980835a823bbf1e776a0460302fba6fc1c00410046293d5b3e3757ff966_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:090423a7278d01ebbf7ed048dea9c7e33dcaf36ab5fd37aeb8ebf9832a98ee35_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:b3de65128344dffd9b0c6007e0118bed2976a3273b272e96cdac6d0265bdb68d_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:f7c8a44e27576faeb89037a79b1e175a66d7ad895ecc001f224c45c59bcc9529_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8@sha256:fbc0820ef3ea0ddc7aa0a32e8556847966b98bf5563aee25d9d5b9dba0563b56_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:8d8eea444b653ab2ba3b252fe996d7775d457cd09cfa384f0fa3a51fe4576a5c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:9edc4f6b0da4723b4ae2e18846ce44596204ccd5413cd6af2b3da62c028962ff_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:a3fadba4ca091be88f26efb8d6fb4298e94c89c5473171277369d87972587df3_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:f602e146b76cd3c1f40d19f2b10cb9a9a09de8a58b637d054fe509c3d3c848f4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:29ac3485b2753099dc2ce4bd9f0d433fd007eb80b19949e6084617d5e4c8401c_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:33b21324dcd8deaa69ca27e256c32269b9c8520c8f841a65369b99f40867fb39_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:6a51fa2984a09ab535a4a642e037dbe4d749b0c287001d73867f36af15fdedf6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:ed4f5d2f4be89dacb91eb072fd06065d1c4a3bbe95a779f15910913a2c01b8bf_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:111d349469f89ce6d1d3678d26f195e2aabfc06d10c46095be671b0fd0c28e95_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:27a6b27b8fa043d8f7be96c526ef0d361bedda1957eae7a464549e7fa4f4d90c_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:2fa2d758167075121d90193a20c6133f6b956b97d60ff149c48139e382c5e240_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:b2886641771b90438b0a68d865a628b532fb22355693248c5689bb4de397e6f6_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:68c54254b55558f7a59a419757c3706c11c72b65126427c5d070472e8c49f445_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:90b53754882f44c06f1736dee31266e6d3b84a35b88d4211b4816d56b92453fa_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:c4a07e270cb2f8b9136be341923575c7c6a533010d2053f6fdbc7aec48e29bca_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:ef45471b5e81bfa5f3b61f2e6159ec863ad8de3af2faf78d6efa229d8ee7708d_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:5f18539d5ffc19d3525321bee95ea2da33de174c20debfb28e42bee1a8008df4_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:7f305f88b076e660cf4329f995cf6a6b12ef5ae325580004580d0c6f0ecf569e_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:9ae4f68d8ac57af106a20674dddbaaf7c273aab5b359d1a3cfa7c6e498d0615a_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a4876418208983e14da1e0434ded22043e1880bf1bb5e60c0cea6295a772eac8_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e1101b02df32a56a9aec80639372248b72963240dc86add446d0d07da65baca7_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:27e7a59bb5c5f60be7509e5f4f07f4181d62e6583a943c46f56f568bfc30c2c1_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:2d228a645c52e829db1b0078458fb2ae0685a444c4a47bca01ef18dbc00e5d0c_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a6f0914b6ea70a3a1dde9614eb388401722fcd9c8c25f5f147728eaa065db0d2_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bc60496d801c19d81020a2f614be34987a603d2ff3d149e58ab4680f6d5e93dd_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:27a35a4c154e6f3242fcf4606eff4142fce91b1ec6342b7682350cf256120fe2_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:388bf4b92ce9e6e277051071237527315a16543e8f9d4bca348dd412d379e0fa_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:67ff57f12a92a4db8abb9cc73511c576e5099d2583c06ea00485f3a676f6fac6_amd64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:f43dab8ced42b0f2babd0e7ed3653cba19bddf89beb355cd4c93ab41c31c6db9_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:698bca4c445cd82d6f27fd23f3fe45248d8e4ae191969823c847abd4064fbfef_arm64",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:7a4be5cc0287daf4f85a5db3fc8a63cd99dd1e4ea69c40711e38cc2ce5ccc393_ppc64le",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:8dfee8533b4cee4381f522b3b58d66a869c9fe5a919c3cb0226fdcd3d44c061b_s390x",
"Red Hat OpenShift GitOps 1.17:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:fd3749bec7e58fd10a7d0b6978e3d0def6c59be0b512295c307b2cdd3c5750a9_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Redis: Redis Lua Use-After-Free may lead to remote code execution"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…