RHSA-2026:27063
Vulnerability from csaf_redhat - Published: 2026-06-23 08:26 - Updated: 2026-09-26 16:10Summary
Red Hat Security Advisory: OpenShift Container Platform 4.20.26 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.20.26 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.20.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.20.26. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:27059
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Vendor Fix
fix
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-40895
Known not affected
89 products, the same list as for
CVE-2026-40895
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-40895
Known not affected
89 products, the same list as for
CVE-2026-40895
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-40895
Known not affected
89 products, the same list as for
CVE-2026-40895
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-40895
Known not affected
89 products, the same list as for
CVE-2026-40895
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-40895
Known not affected
89 products, the same list as for
CVE-2026-40895
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-40895
Known not affected
89 products, the same list as for
CVE-2026-40895
Threats
Impact
Important
A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:1b57935b2c9a488ef21e6d66ad07c2e25a1737b0e0641319fbe7710a24e01e4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:365ac58c2af582f184d3f62beaa48d15f3981e4d8da0cbbb8c93ec6986243b51_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:38eb1cac78fe34949a20dbc1cc949f4d2861d9db7ada1de0e5ed29279901f408_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:d3125750bd9da51e7a35ef16af331b8a2b3dc157b3fa471629fb616322e35fc9_ppc64le | — |
Vendor Fix
fix
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:3bbdf23c749d068f766d18fccd5e5ae23ff90a5565d8f5101b551113cfb6c123_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:979314a23724ebc8de0be49aa32b8f420179125c695ca48549f541e59337e1b2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:98636cb3a8c474d6564ee277234bfa6f8bd4bc74a8a5327c4eb21b26c2c9d626_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:f7cbd75d0671200c3af39c481f36478676c328f47692c1f2c1b46429470eb9bf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3cb1ef218d08069307b9cb1013d1a3814567df8ec55f64ddd9b72f5790a03f3c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:450a1c77d36771a98dfa96bb128a066192871becc7ff3edd5da3f9839de5b87b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:647e915e236daa81b0001b61dcfdbea5cb999a844ec0d52f7d0dd4e224cbcbb9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bf4b64740a63a1f6e541d92128c9237fdd813a52536ed1273983946e3c215f7f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:203ec72895a613490e467305fd2ad96e620d4ea8631b44117be4f7227cb3d162_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:86e58cc04993c9ebb62ff13f8c9e38fcb1dd1bbdd7f5474a8c6de3a73b628492_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:89275d5e3701e681b789e2c80377bdc124c617ccf1fea892fcd9342647ee4e13_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/network-tools-rhel9@sha256:8ec539591813dd64b6e220480649aceb0f20ac8dbaccf29f5852805fe2d653c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:06e3ee0cbdc2f1b3ad5e51bacf75c05cf7f156f8ab0ab451ae0d7849095c35a4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:8dc3a7e099280b53633b6dc3bddcade1de7720e6b26689b99b13f146675c4f5b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:e926f2b13e47bf18d2109a39fb2023f112df68ce206f797f60aabe688b203bde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:ecd2f1b4154e0e1a82956378e620ff618383e341b7ad7571c4c1fbec55a2db5b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:29d98fcb36f650c7bc94edf306894f4add6d8470dd75ef1b9d2f86a96f7eeefb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b3a9fee448a212907122556f9d2b6441122cd09f03fd85b953db0f06527cd841_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:b9a359fca4093efb9deaf581963244e67abfc7afc3ec6df558cc1525adaed085_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:e6d546338774b75c347f1c00f01897d2c18bcc02aae73801c888a1c0bc7159a9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9@sha256:fe589677a60e47f089add4a8662d7a5bb018d149bd40951450afcad9459d0868_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:0265e523cbb12746ce518597e1f2ae8dfed5a4f108410d74a284429511d7dd80_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:06833bd27e40dd3a770cac2b4bc943cbbcc005409df8bcb8da465c2f4cfe25e3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:3e44064c6c2f51f5d59267cb3be081e525227b412f84cdf982239a7340c5a0b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9@sha256:89c39898050cee289a3d05bace758ad4551a9dcb4b55467dff1b70ef304e227a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7b5d98fb5c01c84f70fdd05e5ca4ea35f580eacf123fd70744dd207e90ac8ecc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:dcb687dac46dfcb5190a00860a358b63304e344ee233605c69442ae784df50a7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:5571dc60fd35ac8fc45f1632859804ec7f6b261b131bd8a1f68ab4de49c79a08_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:638bf4691fd54f1854134c0a350a18956f2d4e33367775c35882bbffad8a085e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:e7665d0ff02bafdf87f7cf26d8f9364504b6019a582381408cf5f6bbb8a6b2c0_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator@sha256:ebf9d8e110fdd0eb92437bb9948019dd5caaaa13dff3bbdacf99caf98a11f701_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:49bd024d3d99fb1ad7bab883c7e5f660183c3146ca927b6d7ddceeeddfcba157_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:b66789383841ab46f31f467fa319ec01d202f7f69739ff4d251b4af0a6c9e6e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:c346d06d42db2adc95274fdad624981452835dde285b7f44bf72a8d362ce73bb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:cb690ce1b790312c809730ce08830a3fd43ff06a3136c57256952cd7bbe13d55_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:624021ed9404e77d1417862044df4b04fa3fe3dc026b03ea54a2b87d4376d387_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:a1bd5af44e35c68359b7bc642c195a557a25e15f41124b5874fc1e51ee299bf3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ee697ce277502f25541e9973db31e142af9c4419849a50d0a020c61afcc48c33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:fdea6c63c595dc8b02cef15286aeb3ddc3bfe0193de45201d0cfb11a3bcd589f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:522a646576645bcbf84710a97c8f89c577d55a22f1d8d1c868135d1d8ecbe34c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:81c0cf537924384b7ef75b604e5941fc51fe049641622c4b772852788da14097_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:89f57abd15554b50bd27019be5438490bd6207d18d457607603c511a054f1b7a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-console-rhel9@sha256:9c0de5f2f719b24731c4a5aaa2e1b40d661e67a72fe0d3caac4271f9e9d5ead5_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:1a8f96819a4c2b6c5d8d3d16e7f2d86cd98fec4d54aadc93d577114787713537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:640edf3a82ee8b13796051e101e647b2378da417e14a1dff18ce501e4fd37bb3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:c7a464e13822761ca8082145086084a7ee99dac69eaf2499ae3a216840866dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:f01be0e96604d69f4c4e9e4363da99fab82220b72e34accaedd7c62f3e510f2d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:050d6a3c89ac2be7115949ac33afe56a690b5d56775be5f1f004902ba056da20_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:3170599804e9cf0f6ee3edf955f2d9b34a462a3cf1fb667a2db53ccc9498724c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:74ed6313652eb904df6f81151b9c829c01f7304c6872071a100a65ada5679978_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-insights-rhel9-operator@sha256:8f505384a22a337f1ac2c2b76051e4cee2a60b638cebe734816ff49bb1fb0b9f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7154ccb28376771fbbb8754ddd010672548c43fbec531e0cfdf3007a8efd882c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:7c254637daf1b7564394c9a6425b9dec8a711e27ccfc659d5a55471c218b14cd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:ad266469369890878063a4e0793c144bf73be0c963be65f154f3e8988c666fe2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:fe01dc34d6ef1faf09be0e5b4fd7c9c0db4baafc8fdd77ab61d25167c80e8a53_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:c731759826eeaffcc98dcc86e890adc3dcbc3497761bbebe04265892e782963d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:dcaeb66077a2e78128d7ddc7b03ec9501f65c14f068948a9fbb82245927f2d04_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:06a4c88d17ea03dbcaf83bfbf36d42ae4e288218477c11ba8bdbb45eb5b3ca56_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:387d5a03bce1e6b80a36582c2959e6c0569cbce7f49b5c29297c4eae1fa89a4f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:3ddb9e724e529e60d4b0669d5630f661f416c4e762c60d25b70573b40ef131b3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:cbe78a9f8013acf7217363c5512cb61b16db26ade6a00b3ec9bad7b534ea6c97_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:0f70afc8fc44153005b719e423b9414a806f52a1f0a0eaf383214e7aeb0d1d43_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:9e2ca3a4a43f24bb081c0d1a20350a9086e93dcbdc617b561fcc39369273b32e_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:a66f68ebb39a0474bc89255b465750e203dabacfdec098ec20c14b7adb7e26af_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:f811943f27e46556496a9833e20192a53b11d441660f8815b32f5afbc1eddd0e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:1a7ac4b64621194572606055e495c964f0061619156b58db38e5e3ed0d63b359_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:7acd95b189ae4b09922c757de90a1855a91ec8d185144ef19027bd0ff1c9f522_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:8caabe7828c7c1df3b1edf2585a48055615ff16becb6149a8d558ce9ce717862_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:c37cf3696e1b4c67f30d7a42f324606c6814e61ddbe3e5520e0a7a0a0242ed6d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:0c87c80a5bccd9225c9d1faa85ea7d0deed337a138fadb0412af6590fd9f96b4_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6e40ba6ae462a707631a6f8496ae597f811f3eaef98bdfcc0d0dedb0dcdc1575_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:6ecb5789c21c2bf45a3312bd7116f847a3b15646009fed0031a6cf160306e965_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:7a55683ac150ed1a4ec96017f62099116b81d07a0b0277a6eaab06cc2064116b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3b6e1dbf5de0caacb2cd524ca40193db89ec825360c0dfd8e1f3af197f4539dd_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6a598579673f0a81e14f17fc463ee4f6bb3cfa937f281bd089b479b5155980d6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ad1759daee6b18fa3267b578c75fb178730319d1cd9527a21fb9836ddc4facac_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:babce324aa37ddf6db4514c1a697a4f2769775426fb59c635d2c8702e9952153_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:48b50cb476bad0b50177ddf4d801d8a953249f4c5a268d2822d16ed4845bf33f_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:590285997861e1233f792b5f371e9897086fd3b217a4840c5bfa971118472c94_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9c1401fe5364b8ba3a069ac69a16e60d09f54e1dc17f30bdd438933f60474b8f_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:9f4ff8acdc663301d308156bb2c56d68379a95fa087bc71f41a699a8ed08eba9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:20c651f23e57bce386239c12ad3e2a19aa3220ef5c89c2561cad7bd40476d4c0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:3fa417f375c4d41175b700a1a44f7dbd60f58a9337b1202720696f84d347fda9_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:44f8632e12b1a2e798c518cccff5aff1ebdfc1cdda8a4bb044ed01e322aa1f2c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tests-rhel9@sha256:b081739ac1afa49e7a1eb8f73b76bd30241c056eb55ed06d2845002368571fb3_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:2f154bdf369c1e9b9981b9478399f8bb870aad53bd5f33420a74bfdfd942ae8d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:5d44a3b19601304824c82cb302a575d2ffa8e7085d02abfaae925af1b2908eaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:8d50532844d79c853a38a59c62ad4e6ea253e5ca6d54a81791b38922053f9ddd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.20:registry.redhat.io/openshift4/ose-tools-rhel9@sha256:db6900b8ab7297ae4b098c821386069cba11b54e0211f726607a108b74969067_arm64 | — |
Threats
Impact
Important
References
77 references
Loading 1.0 MB of JSON…
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…