RHBA-2024:3776
Vulnerability from csaf_redhat - Published: 2024-06-10 15:43 - Updated: 2026-08-07 12:42Summary
Red Hat Bug Fix Advisory: LVMS 4.14.6 Bug Fix Update
Severity
Moderate
Notes
Topic: Updated container images that fix multiple bugs are now available for LVMS
4.14
Details: Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to
dynamically provision thin and thick local storage on a cluster with
limited resources.
Users of LVMS are advised to upgrade to the latest version of LVMS in
OpenShift Container Platform, which fixes bugs and security
vulnerabilities.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was discovered in Go's net/http standard library package. When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.
5.3 (Medium)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go's crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert.
5.9 (Medium)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated container images that fix multiple bugs are now available for LVMS\n4.14",
"title": "Topic"
},
{
"category": "general",
"text": "Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to\ndynamically provision thin and thick local storage on a cluster with\nlimited resources.\n\nUsers of LVMS are advised to upgrade to the latest version of LVMS in\nOpenShift Container Platform, which fixes bugs and security\nvulnerabilities.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2024:3776",
"url": "https://access.redhat.com/errata/RHBA-2024:3776"
},
{
"category": "external",
"summary": "OCPBUGS-33085",
"url": "https://issues.redhat.com/browse/OCPBUGS-33085"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_3776.json"
}
],
"title": "Red Hat Bug Fix Advisory: LVMS 4.14.6 Bug Fix Update",
"tracking": {
"current_release_date": "2026-08-07T12:42:31+00:00",
"generator": {
"date": "2026-08-07T12:42:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHBA-2024:3776",
"initial_release_date": "2024-06-10T15:43:20+00:00",
"revision_history": [
{
"date": "2024-06-10T15:43:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-10T15:43:20+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-07T12:42:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "LVMS 4.14 for RHEL 9",
"product": {
"name": "LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:lvms:4.14::el9"
}
}
}
],
"category": "product_family",
"name": "logical volume manager storage"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"product": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"product_id": "lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel9\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"product_id": "lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"product": {
"name": "lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"product_id": "lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel9-operator\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le",
"product": {
"name": "lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le",
"product_id": "lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel9\u0026tag=v4.14.6-6"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"product": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"product_id": "lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel9\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"product_id": "lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"product": {
"name": "lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"product_id": "lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel9-operator\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"product": {
"name": "lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"product_id": "lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel9\u0026tag=v4.14.6-6"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"product": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"product_id": "lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel9\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"product_id": "lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"product": {
"name": "lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"product_id": "lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel9-operator\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"product": {
"name": "lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"product_id": "lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel9\u0026tag=v4.14.6-6"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"product": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"product_id": "lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel9\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"product_id": "lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"product": {
"name": "lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"product_id": "lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel9-operator\u0026tag=v4.14.6-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"product": {
"name": "lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"product_id": "lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel9\u0026tag=v4.14.6-6"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64"
},
"product_reference": "lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64"
},
"product_reference": "lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x"
},
"product_reference": "lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le"
},
"product_reference": "lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64"
},
"product_reference": "lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64"
},
"product_reference": "lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x"
},
"product_reference": "lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le"
},
"product_reference": "lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x"
},
"product_reference": "lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64"
},
"product_reference": "lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64 as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64"
},
"product_reference": "lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"relates_to_product_reference": "9Base-LVMS-4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le as a component of LVMS 4.14 for RHEL 9",
"product_id": "9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
},
"product_reference": "lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le",
"relates_to_product_reference": "9Base-LVMS-4.14"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45290",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268017"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in Go\u0027s net/http standard library package. When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45290"
},
{
"category": "external",
"summary": "RHBZ#2268017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268017"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4",
"url": "http://www.openwall.com/lists/oss-security/2024/03/08/4"
},
{
"category": "external",
"summary": "https://go.dev/cl/569341",
"url": "https://go.dev/cl/569341"
},
{
"category": "external",
"summary": "https://go.dev/issue/65383",
"url": "https://go.dev/issue/65383"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2599",
"url": "https://pkg.go.dev/vuln/GO-2024-2599"
},
{
"category": "external",
"summary": "https://security.netapp.com/advisory/ntap-20240329-0004",
"url": "https://security.netapp.com/advisory/ntap-20240329-0004"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-10T15:43:20+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:3776"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm"
},
{
"cve": "CVE-2024-24783",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268019"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24783"
},
{
"category": "external",
"summary": "RHBZ#2268019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268019"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24783",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4",
"url": "http://www.openwall.com/lists/oss-security/2024/03/08/4"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp",
"url": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp"
},
{
"category": "external",
"summary": "https://go.dev/cl/569339",
"url": "https://go.dev/cl/569339"
},
{
"category": "external",
"summary": "https://go.dev/issue/65390",
"url": "https://go.dev/issue/65390"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2598",
"url": "https://pkg.go.dev/vuln/GO-2024-2598"
},
{
"category": "external",
"summary": "https://security.netapp.com/advisory/ntap-20240329-0005",
"url": "https://security.netapp.com/advisory/ntap-20240329-0005"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-10T15:43:20+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:3776"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:31b4449bad1e87203473227e439209f82368a98b8374b23b297610d63b0d6322_arm64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:71855fe56b4b5d0d5d72f170124d4313b731b036186372d5bdab2cd448054ad2_amd64",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:d2664dd60aa6ed6e577aede1b6c75e0fa342baff33d34ff7f81df2473cb116aa_s390x",
"9Base-LVMS-4.14:lvms4/lvms-must-gather-rhel9@sha256:fdc2bbb1d267438b89dfea972d359fd889ba37e243a3124c4f30ee67ba2f3fb1_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:8fcc797130633dc1f7cde49e6a26fe9ed512ad31ad7d3926139037818eed3b4c_ppc64le",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:d761307b7013d4e82aa8a3219ed48964574466bc5aa2936d12c14a7826977936_amd64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:e4e09f39ab69c0d0b8ae3febe599f61ec2c18fd51982d70e8e12218a27d8d67e_arm64",
"9Base-LVMS-4.14:lvms4/lvms-operator-bundle@sha256:f6e1dafbff82547d118eea721e197a89b94d838f4ec7a100b643dacc36327828_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:35b79bd23e4b826e7435f8d0d6ab00fa153bb12d5d6cc025f1c6885898547008_arm64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:585c86932e27e05635041deda8e594cbd42dc7f6cfae6a5e821ff74300cfe988_amd64",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:5ff014f2ac5325d144510db4e841de9dfd6ef6852273af95a3f2eb634531435e_s390x",
"9Base-LVMS-4.14:lvms4/lvms-rhel9-operator@sha256:e7331d87b408f4d35780ad92b07e878bcefbd38a0572a6fc42d3cbda92cc0c02_ppc64le",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:25db92ac006601341f71d9f8b04f868ad53384a87cc10b682e7759f5f342b7f3_s390x",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:3c9e04d3970551d7158ce20d3be0f6be73ed837c2419184461ff03d5e9011f91_arm64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:a21b811411a475a3ad2b6f64873cee2f579abdf540e66b66450d1c29bb507ad6_amd64",
"9Base-LVMS-4.14:lvms4/topolvm-rhel9@sha256:ea8c15ea24bc7cb1ceebed9aaeb4ccea0b0411cc81c7fd3a6197ed38d5671403_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…