RHSA-2024:8677
Vulnerability from csaf_redhat - Published: 2024-10-30 18:18 - Updated: 2026-05-30 03:10A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in the follow-redirects package. While processing the cross-domain redirection, `follow-redirects` clears authorization headers, however, it misses clearing proxy-authentication headers, which contain credentials as well. This issue may lead to credential leaking, having a high impact on data confidentiality.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
|
A flaw was found in Express. This vulnerability allows untrusted code execution via passing untrusted user input to response.redirect(), even if the input is sanitized.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in the Send library. This vulnerability allows remote code execution via untrusted input passed to the SendStream.redirect() function.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in serve-static. This issue may allow the execution of untrusted code via passing sanitized yet untrusted user input to redirect().
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in body-parser. This vulnerability causes denial of service via a specially crafted payload when the URL encoding is enabled.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 | — |
Vendor Fix
fix
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat OpenShift GitOps v1.12.6. Red Hat\nProduct Security has rated this update as having a security impact of Important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Errata Advisory for Red Hat OpenShift GitOps v1.12.6.\n\nSecurity Fix(es):\n\n* openshift-gitops-argocd-container: openshift-gitops-argocd-container: Denial of Service Vulnerability in body-parser [gitops-1.12](CVE-2024-45590) \n* openshift-gitops-console-plugin-container: follow-redirects: Possible credential leak [gitops-1.12](CVE-2024-28849)\n* openshift-gitops-dex-container: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [gitops-1.12](CVE-2024-24786)\n* openshift-gitops-argocd-container: go-retryablehttp: url might write sensitive information to log file [gitops-1.12](CVE-2024-6104)\n* openshift-gitops-argocd-container: Improper Sanitization in serve-static [gitops-1.12](CVE-2024-43800)\n* openshift-gitops-argocd-container: Improper Input Handling in Express Redirects [gitops-1.12](CVE-2024-43796)\n* openshift-gitops-argocd-container: Code Execution Vulnerability in Send Library [gitops-1.12](CVE-2024-43799)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:8677",
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "GITOPS-4234",
"url": "https://issues.redhat.com/browse/GITOPS-4234"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8677.json"
}
],
"title": "Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.6 security update",
"tracking": {
"current_release_date": "2026-05-30T03:10:33+00:00",
"generator": {
"date": "2026-05-30T03:10:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2024:8677",
"initial_release_date": "2024-10-30T18:18:28+00:00",
"revision_history": [
{
"date": "2024-10-30T18:18:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-30T18:18:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-30T03:10:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.12",
"product": {
"name": "Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.12::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift GitOps 1.12",
"product": {
"name": "Red Hat OpenShift GitOps 1.12",
"product_id": "9Base-GitOps-1.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_gitops:1.12::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift GitOps"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.12.6-2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64",
"product": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64",
"product_id": "openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=v1.12.6-1"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568?arch=arm64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.12.6-2"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"product": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"product_id": "openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9\u0026tag=v1.12.6-1"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"product": {
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"product_id": "openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-operator-bundle\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66?arch=amd64\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.12.6-2"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"product": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"product_id": "openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"product": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"product_id": "openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"product_identification_helper": {
"purl": "pkg:oci/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"product": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"product_id": "openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/console-plugin-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"product": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"product_id": "openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"product": {
"name": "openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"product_id": "openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/dex-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"product": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"product_id": "openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/kam-delivery-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"product": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"product_id": "openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/must-gather-rhel8\u0026tag=v1.12.6-2"
}
}
},
{
"category": "product_version",
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"product": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"product_id": "openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"product_identification_helper": {
"purl": "pkg:oci/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461?arch=s390x\u0026repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator\u0026tag=v1.12.6-2"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64"
},
"product_reference": "openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64"
},
"product_reference": "openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x"
},
"product_reference": "openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x"
},
"product_reference": "openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64"
},
"product_reference": "openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64"
},
"product_reference": "openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64"
},
"product_reference": "openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64"
},
"product_reference": "openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"relates_to_product_reference": "8Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64"
},
"product_reference": "openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"relates_to_product_reference": "9Base-GitOps-1.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64 as a component of Red Hat OpenShift GitOps 1.12",
"product_id": "9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
},
"product_reference": "openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64",
"relates_to_product_reference": "9Base-GitOps-1.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-6104",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2024-06-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2294000"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go-retryablehttp: url might write sensitive information to log file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-6104"
},
{
"category": "external",
"summary": "RHBZ#2294000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-6104",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6104"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6104",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6104"
}
],
"release_date": "2024-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "go-retryablehttp: url might write sensitive information to log file"
},
{
"cve": "CVE-2024-24786",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2024-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268046"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Golang\u0027s protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24786"
},
{
"category": "external",
"summary": "RHBZ#2268046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786"
},
{
"category": "external",
"summary": "https://go.dev/cl/569356",
"url": "https://go.dev/cl/569356"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/",
"url": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2611",
"url": "https://pkg.go.dev/vuln/GO-2024-2611"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON"
},
{
"cve": "CVE-2024-28849",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2269576"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in the follow-redirects package. While processing the cross-domain redirection, `follow-redirects` clears authorization headers, however, it misses clearing proxy-authentication headers, which contain credentials as well. This issue may lead to credential leaking, having a high impact on data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: Possible credential leak",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28849"
},
{
"category": "external",
"summary": "RHBZ#2269576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28849",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28849"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28849",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28849"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp"
}
],
"release_date": "2024-03-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "follow-redirects: Possible credential leak"
},
{
"cve": "CVE-2024-43796",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-09-10T15:30:28.106254+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Express. This vulnerability allows untrusted code execution via passing untrusted user input to response.redirect(), even if the input is sanitized.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "express: Improper Input Handling in Express Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43796"
},
{
"category": "external",
"summary": "RHBZ#2311152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43796",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43796"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43796",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43796"
},
{
"category": "external",
"summary": "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553",
"url": "https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553"
},
{
"category": "external",
"summary": "https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx",
"url": "https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx"
}
],
"release_date": "2024-09-10T15:15:17.510000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "express: Improper Input Handling in Express Redirects"
},
{
"cve": "CVE-2024-43799",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-09-10T15:30:30.869487+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311153"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Send library. This vulnerability allows remote code execution via untrusted input passed to the SendStream.redirect() function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "send: Code Execution Vulnerability in Send Library",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43799"
},
{
"category": "external",
"summary": "RHBZ#2311153",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311153"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43799",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43799"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35",
"url": "https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg",
"url": "https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg"
}
],
"release_date": "2024-09-10T15:15:17.727000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "send: Code Execution Vulnerability in Send Library"
},
{
"cve": "CVE-2024-43800",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2024-09-10T15:30:33.631718+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in serve-static. This issue may allow the execution of untrusted code via passing sanitized yet untrusted user input to redirect().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "serve-static: Improper Sanitization in serve-static",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "rhdh-hub-container 1.2 and 1.3 have included patches for this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-43800"
},
{
"category": "external",
"summary": "RHBZ#2311154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-43800",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-43800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43800"
},
{
"category": "external",
"summary": "https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b",
"url": "https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b"
},
{
"category": "external",
"summary": "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa",
"url": "https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa"
},
{
"category": "external",
"summary": "https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p",
"url": "https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p"
}
],
"release_date": "2024-09-10T15:15:17.937000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "serve-static: Improper Sanitization in serve-static"
},
{
"cve": "CVE-2024-45590",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2024-09-10T16:20:29.292154+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2311171"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in body-parser. This vulnerability causes denial of service via a specially crafted payload when the URL encoding is enabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "body-parser: Denial of Service Vulnerability in body-parser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45590"
},
{
"category": "external",
"summary": "RHBZ#2311171",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2311171"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45590",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45590"
},
{
"category": "external",
"summary": "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce",
"url": "https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce"
},
{
"category": "external",
"summary": "https://github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7",
"url": "https://github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7"
}
],
"release_date": "2024-09-10T16:15:21.083000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-30T18:18:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8677"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:30de68a0ecca94c6cbf06d0f7bbd91651bc3733a6ee496b58cdcc5c6d1b7fe84_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:42d01565f1c8b85e5dc480b34aea52fdce15a7071c65102b73bc45864f30217c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:600239219d6abc36e239c4378f1a5ae6360bfe6367c5bbbacaf713d4194cb066_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/argo-rollouts-rhel8@sha256:8405b9602109392ae984137d143f91b8f2b7550d5fca16902b1b38ad62117072_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:3b4a0a076a0954e4bf45898872a4db41a45d6f4223b097931fb3458c72e0e287_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:b5ecdbfb2000470a8efa46e6cb62c850db7c4acebd46b11d7c791c98b445ca44_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:df9455d9cb06511fd94a7335fd256d31a16cfdefc7af1431b0693de53811eb61_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/argocd-rhel8@sha256:ef1882372a4a0c12604c544aa09ebc0fb6697f2108accd74f423e8a42a9a849a_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:49299450da07c7d63cd34104182634b267903ce4c86a9598fc1da72073ef885c_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:b7e59715fc4ddc0d6cc70ec0eb14660fa25d1a10d784fa7d39e26ea657d90ca2_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e4fac9da180ce7fcb2cd24d7c5ed54847fdca24c783e6866a4917307a791a92a_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/console-plugin-rhel8@sha256:e7e12eab0e329bbc4ba85ae71508c667e13a6f707806ab938e78bb4d05377377_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:278f783a708bf4f0984c525d8faac82642519322e0ed74c4facc10db42578a85_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:383d9b606fe190b15b570949c34ce8109bfced4274e9f1edd339266bdc4cad96_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:b41b9d088cb71cbf9a57c8fd63a52462ffa9dbd0ac1cb6358c688a45035ca3c5_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/dex-rhel8@sha256:c49f49e26ba3c155f3e78e1444d4fa400415d5517bad654eed1a59437311fe40_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-operator-bundle@sha256:80198f65f7e3f9022a34e0342e9423807b855dcb7bda810172eebc9a27afb5c2_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:1da6cc56730caf7dce6039bff116137023ef6fd28a7a9ead31f3aa44da336461_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:6f1b7e9b88c56ac34029eb18148828485b88abbc291a0f36095d585792fa5b9b_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:70d1de694942fae82528179affc9408abfa835c5c14a438b13953f7300267d66_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8-operator@sha256:7419af667f37858951d00f889d7972f07a2bbce506371369b2bbc3d85afbe568_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:7135ff9064edcdc78f941ee6440f611bbee2cdd9fcdcab304eb12d4be043e8ef_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:c4935ae04342535d4ff8f1e7d4b63b3a7b9d675a4a65852784ebc680229c0b8e_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d2d712ddc8daeb9293080848ccbc4e368bbb8732caabaebdba61839a6f34cb85_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/gitops-rhel8@sha256:d9faecc2318952cab075b57006c862fe8cbcc869efb18d45aa29a08fc24e7479_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:1b0572536b919548af38ad77f348b341f1a8052812528ab309ac9c4e623655cb_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:8ab3edc2f56d6b195ac31865c21dbad4834c08d2aa5f7d111cfc0f57c3f0ce76_arm64",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:9a91b3b11c52ff74cf47fe1ab3f21d0f9c0ccfe2b1d8a0e42e383286c3a185e2_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/kam-delivery-rhel8@sha256:edf99302ddb3cb16d27f575929b5a59b22f50ff605eceaa6e29f1be72b02bc5c_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:6f13f8c8e710641972c410c0400e64447fb529fb4038a85d59a00d0893448e73_ppc64le",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:b3887fd6109bc55507b134e9ebd596a89d42413ccb5b863f328c60bd1b668afd_s390x",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:f0eaf113b4a3aec59bd5144af00d807391c33e410e56e05175c0685fd672305b_amd64",
"8Base-GitOps-1.12:openshift-gitops-1/must-gather-rhel8@sha256:fbd2311d841e9ce89c63c8959c4ba296075fa33ed0a75d3e169d6e7d0162f226_arm64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:3dfa640a19aaaa00062e1b13347f28f070447cf4e41445f3bcc520537be43ba6_amd64",
"9Base-GitOps-1.12:openshift-gitops-1/argocd-rhel9@sha256:620040787b5e670a227bf57cc25166c931cfe0cfbf6352ac56cacfbd97eca142_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "body-parser: Denial of Service Vulnerability in body-parser"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.