RHSA-2025:23207
Vulnerability from csaf_redhat - Published: 2025-12-15 15:40 - Updated: 2025-12-30 04:51Summary
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.5 security update
Notes
Topic
Important: Red Hat OpenShift GitOps v1.16.5 security update
Details
An update is now available for Red Hat OpenShift GitOps.
Bug Fix(es) and Enhancement(s):
* GITOPS-8116 (CVE-2024-45338 openshift-gitops-dex-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [gitops-1.17])
* GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)
* GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)
Post-Upgrade Action Required: Audit GitOps Operator Roles
Following this upgrade, we strongly recommend you run the provided audit script to review namespace-scoped access.
* The script identifies Roles/RoleBindings that grant cross-namespace access for the GitOps operator's features (created via .spec.sourceNamespaces).
* Run it to verify and confirm that only the intended namespaces have cross-namespace access to deploy applications.
For more details, refer to :
- https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Important: Red Hat OpenShift GitOps v1.16.5 security update",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat OpenShift GitOps.\nBug Fix(es) and Enhancement(s):\n* GITOPS-8116 (CVE-2024-45338 openshift-gitops-dex-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [gitops-1.17])\n* GITOPS-8019 (CVE-2025-49844 - Vulnerability with Redis)\n* GITOPS-8142 (CVE-2024-45337 reported by RHACS for OpenShift GitOps Operator v1.18.1 (ArgoCD-based) due to outdated git-lfs binary, dependency update required to remove false positive.)\n\nPost-Upgrade Action Required: Audit GitOps Operator Roles \n\nFollowing this upgrade, we strongly recommend you run the provided audit script to review namespace-scoped access. \n * The script identifies Roles/RoleBindings that grant cross-namespace access for the GitOps operator\u0027s features (created via .spec.sourceNamespaces). \n * Run it to verify and confirm that only the intended namespaces have cross-namespace access to deploy applications. \n\nFor more details, refer to : \n - https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles ",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:23207",
"url": "https://access.redhat.com/errata/RHSA-2025:23207"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45337",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13888",
"url": "https://access.redhat.com/security/cve/CVE-2025-13888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-49844",
"url": "https://access.redhat.com/security/cve/CVE-2025-49844"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.16/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_gitops/1.16/"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles",
"url": "https://github.com/redhat-developer/gitops-operator/tree/master/scripts/audit-namespace-roles"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23207.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.5 security update",
"tracking": {
"current_release_date": "2025-12-30T04:51:26+00:00",
"generator": {
"date": "2025-12-30T04:51:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.14"
}
},
"id": "RHSA-2025:23207",
"initial_release_date": "2025-12-15T15:40:35+00:00",
"revision_history": [
{
"date": "2025-12-15T15:40:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-12-16T07:12:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-12-30T04:51:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.16",
"product": {
"name": "Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.16::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3Ad22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3Abe490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Af4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Af0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Abcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256%3A1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Ab560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3A52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3Aca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3A206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3A28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3Ad84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Ac41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256%3A1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256%3A0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-extensions-rhel8@sha256%3A22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256%3A603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256%3Ab4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256%3Ad30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256%3A50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256%3Ad6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"product_id": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256%3A3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64 as a component of Red Hat OpenShift GitOps 1.16",
"product_id": "Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
},
"product_reference": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64",
"relates_to_product_reference": "Red Hat OpenShift GitOps 1.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:40:35+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23207"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:40:35+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23207"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2025-13888",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2025-12-02T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418361"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged workloads that run on master nodes, effectively giving them root access to the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift-gitops-operator: OpenShift GitOps: Namespace Admin Cluster Takeover via Privileged Jobs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important instead of Critical. While full cluster compromise is possible, it requires the attacker to already possess authenticated namespace administrator credentials, reducing the attack surface to authorized internal users rather than external attackers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13888"
},
{
"category": "external",
"summary": "RHBZ#2418361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13888",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13888"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef",
"url": "https://github.com/redhat-developer/gitops-operator/commit/bc6ac3e03d7c8b3db5d8f1770c868396a4c2dcef"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/pull/897",
"url": "https://github.com/redhat-developer/gitops-operator/pull/897"
},
{
"category": "external",
"summary": "https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2",
"url": "https://github.com/redhat-developer/gitops-operator/releases/tag/v1.16.2"
}
],
"release_date": "2025-12-15T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:40:35+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23207"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openshift-gitops-operator: OpenShift GitOps: Namespace Admin Cluster Takeover via Privileged Jobs"
},
{
"cve": "CVE-2025-49844",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-10-03T20:01:14.375087+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2401324"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution (RCE) within the Redis process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Redis: Redis Lua Use-After-Free may lead to remote code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability should be rated Important rather than Moderate because it introduces a memory-safety defect in Redis\u2019s Lua subsystem that can be weaponized for remote code execution (RCE). An authenticated actor with permission to run Lua can craft scripts that trigger a use-after-free in the parser/stack-management code, giving precise control over freed memory and enabling arbitrary code execution inside the redis-server process. That risk is fundamentally different from a typical moderate issue (e.g., a crash or limited denial-of-service): successful exploitation directly compromises the server runtime and all in-memory contents\u2014cached data, session tokens, and application state\u2014rather than merely disrupting service. Because Redis commonly runs with elevated privileges and is a trusted core component in application architectures, an RCE in the server process undermines confidentiality, integrity, and availability across dependent services. Authenticated attackability, trivial exploitation via standard commands (EVAL/EVALSHA), and the potential for full-process compromise elevate CVE-2025-49844 to Important severity.\n\nThis flaw exists only in the Redis server implementation; \n\nRedis client libraries (Python, Node.js, Rust, etc.) are not affected by this vulnerability, and it only exists in the Redis server\u2019s embedded Lua engine where scripts execute. Client libraries merely transmit EVAL/EVALSHA to the server.\n\n\nRed Hat Satellite does not ship the Redis server, and the Redis client libraries it includes (such as python-redis, python-aioredis and rubygem-redis) are not impacted by this vulnerability. While Satellite consume the Redis package from the underlying RHEL system, which is affected, the Redis service in Satellite is bound only to the local interface and is accessible solely by internal components like Pulp and Dynflow. Since vulnerability requires sending crafted Lua payloads to the Redis command interface, and no external or untrusted clients can connect, the effective exposure within Satellite is nullified.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x"
],
"known_not_affected": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-49844"
},
{
"category": "external",
"summary": "RHBZ#2401324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2401324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-49844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49844"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-49844",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49844"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539",
"url": "https://github.com/redis/redis/commit/d5728cb5795c966c5b5b1e0f0ac576a7e69af539"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/8.2.2",
"url": "https://github.com/redis/redis/releases/tag/8.2.2"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q",
"url": "https://github.com/redis/redis/security/advisories/GHSA-4789-qfc9-5f9q"
},
{
"category": "external",
"summary": "https://redis.io/blog/security-advisory-cve-2025-49844/",
"url": "https://redis.io/blog/security-advisory-cve-2025-49844/"
}
],
"release_date": "2025-10-03T19:27:23.609000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-12-15T15:40:35+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:23207"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.\n\nTo reduce the risk, restricting network access to trusted hosts, enforcing strong authentication and protected-mode, disabling or limiting Lua scripting where possible can be beneficial and apply least-privilege ACLs to reduce who can run scripting commands, keep instances non-public with firewalls/VPCs, and follow Redis hardening guidance to minimize exposure.",
"product_ids": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:1b6aa315db581860193221a3f9c6fc41aee27e565be3b35d3bcfdf96b78aa9a1_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9330fc60983057b6e4d5982a9d26f75edd19f60a27e51d399d432904fd6fabeb_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:9612285bdfdef053b85e20ae1f051fa920e54dab0fb2fe2eb07361a9b4a11b5b_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d22dd4dd09ac5762db0e1640b0f4e095d9d7d8ab2a4a19a6387b1c677cc299bb_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:22d449937c066aea055b8591723934174748907161e4ff9f9086b59c5e95bf4f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:5083f82c8c279384a9b1ffb03295da165d5b2e7c12538f5792b094830d8628bc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:b560d638da1fd627ffe238a770d2b0a382f9947b429a02c22a39cfec7a9a14bd_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:ca1bb876d3e7b3dfede5b542a7c6a8bdece5555cc872f97d7e7a31823dad2fd5_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:0c5deccc37d4904c3d9e2395f8633588ab9ea2516f2b64809ff27eae06c0a4cb_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:128bc4204874b52f3d92a363224cf111b9d3905402526fe3cc267a52679bff2d_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:79b152b79000b6a9673f62bdaf0bf7ddd9175483cc8e3732417738569d9dcba3_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:be490bdfd6f793e7298e13792ee230cf6f061a67727aac6a0a6f298e02d106ce_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:529989e5fb64e6451ae21dd10f293e182ae52a3f938abe6e8082cf415cb0fb35_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:603bef1d5ab79b33458edc81bf06d32dd5be50df06eab25a0a1973c9083d7553_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:60be065c239e044ae5f9ac38a20d5d76e9f1912c2fa2bd84f7f0d0697a1e6cda_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:990d911c2141f78e8f2bae55f7de8b400d0e02dec1ea761d2befe24954debe88_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:01a290257f7a67491567952e14fe172486de00dec8bf7c963482bea6d4b3f9c7_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:206ef103465edbeef20de28b0c936eb1aa8403100f5ee58984964d614d099ea6_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:b4fac7c2dbc1139f070ab594e35bd2f424b81a4fa025754d1b3a7a4864c3a6c5_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:f4c13bc089a23eb0ce2057a9bc7f6ae7ea626b9ef27a568410f2e94fe27d6c07_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:28291a0151e5c5acc71c0da1dcf6d0476280bb12c81483c8c5f09929844ba0eb_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:86b9fb43226ae1b8db105c67f882388aaf4f6df816e3d90e5be1de234b48ad4d_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:d30ca5a1264146a12fe1f86f669272585a8976cbe2facba5c75fe1bf5ad46d26_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:f0c88a955a27b9939c7be9304ba56ea794cf08c4c2e9637eb7f06fb59055d416_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:1e7fb9262023798711dc58fecf9c57c2fbd260a7f942eef2a9fd2822dbfb0b74_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:52b550b043480277626e591ec85b832e91f69b5f91dd72fc8823788635f0eb11_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:bcc192e3e9ff8dfd15bd311fdeda919653721e85338c96d5ad29fa6f1e4e3365_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:c41c99f360a2515bce55c42e309e2c72500ba66d3a2c461412dee7de5ea9a9fa_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:d6102d2d2c0f46d8ceb81d7d85dba857283a6bca3828a99ccaef9feec7c1478a_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50c6fdcaa62c5eb09dad85edbfb3e0818870c1d0ae6121c328375826e727a2f2_arm64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:50f449a62b01b2c068b6d0cb4afe822a9c16256da520dc3d447a279ac3f80fe9_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:8ea5487a8a33b44fd6b7d3b2749dc46bc39b72dce1725cf3c612be78669c43cc_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:d84b86fdba90d33ea4486833a22c277143ef74a61bfcfa18f3a77657ddd92a2c_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:04167997bbf8fc40e6010c9eb0510bcdadaabb00037c36ed95ae990a78032691_ppc64le",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:3b09515064d1552e910a52fce75cf23774776747855a281bb03c67617924fe3f_s390x",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:632e6c439c879fdc116d9ba28c46d8b703a82c7e74e2ea6d609ebb0f33d5b58c_amd64",
"Red Hat OpenShift GitOps 1.16:registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6564195bb96a655e4951e9ed310f18dd328045704f40b5834317fb4a1fd42471_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Redis: Redis Lua Use-After-Free may lead to remote code execution"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…