RHSA-2026:65841

Vulnerability from csaf_redhat - Published: 2026-09-17 05:10 - Updated: 2026-10-10 09:53
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.13.71 security and extras update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.71. See the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2026:65840 Security Fix(es): None For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.

CWE-295 - Improper Certificate Validation
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64 —
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64 —
Threats
Impact Moderate

A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.

CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 1 product, the same list as for CVE-2025-68121
Known not affected 37 products, the same list as for CVE-2025-68121
Threats
Impact Important

A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.

CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64 —
Workaround
Unresolved product id: Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64 —
Workaround
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:65841 self
https://access.redhat.com/security/cve/CVE-2025-68121 external
https://access.redhat.com/security/cve/CVE-2026-32280 external
https://access.redhat.com/security/cve/CVE-2026-33814 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2025-68121 self
https://bugzilla.redhat.com/show_bug.cgi?id=2437111 external
https://www.cve.org/CVERecord?id=CVE-2025-68121 external
https://nvd.nist.gov/vuln/detail/CVE-2025-68121 external
https://go.dev/cl/737700 external
https://go.dev/issue/77217 external
https://groups.google.com/g/golang-announce/c/K09… external
https://pkg.go.dev/vuln/GO-2026-4337 external
https://access.redhat.com/security/cve/CVE-2026-32280 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456339 external
https://www.cve.org/CVERecord?id=CVE-2026-32280 external
https://nvd.nist.gov/vuln/detail/CVE-2026-32280 external
https://go.dev/cl/758320 external
https://go.dev/issue/78282 external
https://groups.google.com/g/golang-announce/c/0uY… external
https://pkg.go.dev/vuln/GO-2026-4947 external
https://access.redhat.com/security/cve/CVE-2026-33814 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467815 external
https://www.cve.org/CVERecord?id=CVE-2026-33814 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33814 external
https://go.dev/cl/761581 external
https://go.dev/cl/761640 external
https://go.dev/issue/78476 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4918 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.13.\n\nRed Hat Product Security has rated this update as having a security impact of  Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.71. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:65840\n\nSecurity Fix(es):\n\nNone\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:65841",
        "url": "https://access.redhat.com/errata/RHSA-2026:65841"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
        "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33814"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65841.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.13.71 security and extras update",
    "tracking": {
      "current_release_date": "2026-10-10T09:53:43+00:00",
      "generator": {
        "date": "2026-10-10T09:53:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:65841",
      "initial_release_date": "2026-09-17T05:10:29+00:00",
      "revision_history": [
        {
          "date": "2026-09-17T05:10:29+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-17T05:12:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-10T09:53:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.13",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.13",
                  "product_id": "Red Hat OpenShift Container Platform 4.13",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.13::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Container Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cloud-event-proxy@sha256%3A3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy\u0026tag=1788844909"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cloud-event-proxy@sha256%3A3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8\u0026tag=1788844909"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cluster-nfd-operator@sha256%3A779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-nfd-operator\u0026tag=1788844817"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel8@sha256%3Ada1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8\u0026tag=1788844917"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-clusterresourceoverride-rhel8-operator@sha256%3A6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator\u0026tag=1788844837"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-infiniband-cni@sha256%3A1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-infiniband-cni\u0026tag=1788844883"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ptp@sha256%3Afd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp\u0026tag=1788844854"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-diskmaker-rhel9@sha256%3A3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9\u0026tag=1788557472"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-mustgather-rhel9@sha256%3A00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9\u0026tag=1788557427"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-local-storage-rhel9-operator@sha256%3Ae9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-local-storage-rhel9-operator\u0026tag=1788843494"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-node-feature-discovery@sha256%3Aa148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-node-feature-discovery\u0026tag=1788845068"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ansible-operator@sha256%3A8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ansible-operator\u0026tag=1788845083"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-cluster-capacity@sha256%3A16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-capacity\u0026tag=1788844934"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-dns-proxy@sha256%3A70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-dns-proxy\u0026tag=1788844896"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-router@sha256%3A4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-router\u0026tag=1788844804"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-helm-operator@sha256%3A6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-helm-operator\u0026tag=1788845025"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-operator-sdk-rhel8@sha256%3A2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-operator-sdk-rhel8\u0026tag=1788844916"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-kubernetes-nmstate-handler-rhel8@sha256%3A0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8\u0026tag=1788844993"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
                  "product_id": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/kubernetes-nmstate-rhel8-operator@sha256%3A2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator\u0026tag=1788844933"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-container-rhel8@sha256%3A2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8\u0026tag=1788845765"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-aws-efs-csi-driver-rhel8-operator@sha256%3Acbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator\u0026tag=1788844840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-csi-driver-shared-resource-mustgather-rhel8@sha256%3Ac7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8\u0026tag=1788846685"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-egress-http-proxy@sha256%3A3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-egress-http-proxy\u0026tag=1788844907"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
                  "product_id": "registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/frr-rhel8@sha256%3A4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/frr-rhel8\u0026tag=1788844161"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel8@sha256%3A5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8\u0026tag=1788844868"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-gcp-filestore-csi-driver-rhel8-operator@sha256%3A846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator\u0026tag=1788844845"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
                  "product_id": "registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/metallb-rhel8@sha256%3A8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel8\u0026tag=1788844202"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
                  "product_id": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/metallb-rhel8-operator@sha256%3Aadf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/metallb-rhel8-operator\u0026tag=1788844167"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-ptp-operator@sha256%3A7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ptp-operator\u0026tag=1788844798"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
                  "product_id": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ptp-must-gather-rhel8@sha256%3Af8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ptp-must-gather-rhel8\u0026tag=1788846652"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64",
                  "product_id": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/sriov-cni-rhel9@sha256%3A4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/sriov-cni-rhel9\u0026tag=1788557375"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-dp-admission-controller@sha256%3Aea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-dp-admission-controller\u0026tag=1788844839"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-config-daemon@sha256%3A5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-config-daemon\u0026tag=1788844879"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-device-plugin@sha256%3A97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-device-plugin\u0026tag=1788844811"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-operator@sha256%3A00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-operator\u0026tag=1788844839"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-sriov-network-webhook@sha256%3Aefaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-sriov-network-webhook\u0026tag=1788844860"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel8@sha256%3A8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8\u0026tag=1788845005"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
                  "product_id": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/openshift/ose-vertical-pod-autoscaler-rhel8-operator@sha256%3Aecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator\u0026tag=1788844875"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
        },
        "product_reference": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64",
        "relates_to_product_reference": "Red Hat OpenShift Container Platform 4.13"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-68121",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-02-05T18:01:30.086058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2437111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "RHBZ#2437111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/737700",
          "url": "https://go.dev/cl/737700"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/77217",
          "url": "https://go.dev/issue/77217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
          "url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4337",
          "url": "https://pkg.go.dev/vuln/GO-2026-4337"
        }
      ],
      "release_date": "2026-02-05T17:48:44.141000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T05:10:29+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65841"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
    },
    {
      "cve": "CVE-2026-32280",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-08T02:01:19.572351+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456339"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456339",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758320",
          "url": "https://go.dev/cl/758320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78282",
          "url": "https://go.dev/issue/78282"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4947",
          "url": "https://pkg.go.dev/vuln/GO-2026-4947"
        }
      ],
      "release_date": "2026-04-08T01:06:58.595000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T05:10:29+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65841"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
    },
    {
      "cve": "CVE-2026-33814",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:11.324941+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64"
        ],
        "known_not_affected": [
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
          "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33814"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/761581",
          "url": "https://go.dev/cl/761581"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/761640",
          "url": "https://go.dev/cl/761640"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78476",
          "url": "https://go.dev/issue/78476"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4918",
          "url": "https://pkg.go.dev/vuln/GO-2026-4918"
        }
      ],
      "release_date": "2026-05-07T19:41:17.631000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T05:10:29+00:00",
          "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:65841"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/frr-rhel8@sha256:4967ce4426d10e192ffbded45c25749825d4beed9fc8c2ede76b4f5c69ffff76_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:2c663da22ae6b0b67e826366a91426712b60ab4fd3d8fc3a77b67de3e69f7372_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:adf413d7f637ae3b3c8cb086baa40444cc435608473ec626d1a28c273cbcf567_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/metallb-rhel8@sha256:8047450fa561a1ee5f55b9b16435abda649577a6bee933c3d04cf78d76c38ff8_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ansible-operator@sha256:8e734ca7d14ed7bef6c5f84f5d58150e405b02f88978f484fc03e9887a1f20d5_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:2aded820cb18e5804cf8414313dbb753ed1602dbd434cc0f7a3d36275006ddbb_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:cbf636e0c1cea208da6071d7d681106be72fcb1ac68e250a2f0b25de9ae2b9fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:3d55da689b8504bc1f27cbc59c3c9470c088361260948a483cc54221b3ce0827_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-capacity@sha256:16802a8a45059698ad2a9c5014fec8fb0740d3a9309bc5a86c74360d2f258257_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:779c844e521123630997046a42471c4abcf4a392b3a785b818e1e48b7e9273db_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:6fd8c61947d3847e5858d400081e29daecbd14aa56b5d09c3620c068a8cad84e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:da1aa232bf906494b7ebc7a8bceb0fe8ba0429b9c36bbcb83096399c9ab6ddaf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:c7098ba88b21a1b0b8e0c861b2c930de0db0f076ea94dd051123c14260a3459c_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:70fa17eb5ff0eb2396a963d5a959822361e203a062e4979200150f2fffb82bd3_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e6875f24308215a48a8e6bd36e85c75428019328aa71b2dcafa738d3165ab64_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-egress-router@sha256:4b1b36770ffcd469b6a96b54a1747228f796b905aadb9a6da4432bdfe3c4d355_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:846e3a86f8bc2407373ef1c7595d9606d3e0310ed127c317e0bfb1a4971f042a_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:5dc42bd3d4394c16a743d5c8d2992c7f2658ffc635d23e04344659404a752b91_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-helm-operator@sha256:6158aacee8e8d7305d3d5e496dd8138bebb3dfe6ba0f7620fba25b9f0c3e3c9f_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:0bc91dcb8381ebfa75feebceff24976355cf3a6fce3557eb3aa79a04564cc784_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:3d4811f49c25fe47111b5b956e4793ee7ea27fbf9a7a2d00ca7ab524126d8604_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:00abd55dab4d75e9c7c9cbea6a7239fa3bceb9a7ebaaeacd2840d77c2950c7a9_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:e9b5997b1f266e77c0e6463e60b3384fa3ecedfa41108d06425d226d853f9c7d_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:a148dab70d92449dd77b711a8e9282ca363ced0097b23425a4da36b4f211f68b_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:2ea1622e77c29cd79a7bca0e747ca2789c106d4214485878336240a221b59f08_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp-operator@sha256:7a2b71e4ed0bf29fbdd4f48d6113f9e3532ab59708522bd44af15dbab12462ed_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-ptp@sha256:fd6e268081fe700e84b978fe25610f1c1d309cb8893e9ccee40fefa936f99d0e_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:ea27c3e4e57d9650192d41ee0974414a9ea766e4a4e98692ea9917c9f5c68ae7_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:1789959e39f409d9757f0d7014a86c583aabac6d59d148b0ab3a29c525613db4_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:5caf71386c430335d805e03962be2a8ada26b3a96ae9a623d13c592bdea39dc1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:97eaea215b0ec1207b6db43a11a3380c4a8fefc471959610adaf1e1ba93e0eb1_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-operator@sha256:00e9da7e8bae23f108f4653c417edef2a77c12d90df3fccc3cb5091c7c8f07cf_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-sriov-network-webhook@sha256:efaa06103760c918d61a6e38f4504108783ade2cbcc4c271b42be6271c49eec2_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:ecd72f49b5825ec79968b3b840d7d1ed6de212b4febb8a62e307c2317ae3a079_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8bd0842bad63f4479421efc1928cfc8563e9c05d29d0ffca00e1e4b195f962fe_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:f8d39d8ceb698c183a4ebc52b3b70252bd8b8d12874c89af6f8d06b077bc0a32_amd64",
            "Red Hat OpenShift Container Platform 4.13:registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:4d366d2d65e37d4232bbc171ea7fca13c1e788b587d757468055d5dc5a7054d8_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…