RHBA-2025:8688
Vulnerability from csaf_redhat - Published: 2025-06-09 15:29 - Updated: 2026-08-07 13:38Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.12.10 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.12.10 is now available with bug fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.12.10
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.
6.5 (Medium)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted, and the memory is unavailable. When password authentication is enabled on the Redis server but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system runs out of memory.
7.5 (High)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.10 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.10",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2025:8688",
"url": "https://access.redhat.com/errata/RHBA-2025:8688"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_8688.json"
}
],
"title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.12.10 bug fix release",
"tracking": {
"current_release_date": "2026-08-07T13:38:38+00:00",
"generator": {
"date": "2026-08-07T13:38:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHBA-2025:8688",
"initial_release_date": "2025-06-09T15:29:30+00:00",
"revision_history": [
{
"date": "2025-06-09T15:29:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-06-09T15:29:30+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-07T13:38:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Quay v3",
"product": {
"name": "Quay v3",
"product_id": "8Base-Quay-3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"product_id": "quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.10-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"product": {
"name": "quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"product_id": "quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"product": {
"name": "quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"product_id": "quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"product_id": "quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"product": {
"name": "quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"product_id": "quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.10-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"product": {
"name": "quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"product_id": "quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le",
"product": {
"name": "quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le",
"product_id": "quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.10-3"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"product_id": "quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.10-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"product": {
"name": "quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"product_id": "quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"product": {
"name": "quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"product_id": "quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"product_id": "quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"product": {
"name": "quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"product_id": "quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.10-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"product": {
"name": "quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"product_id": "quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"product": {
"name": "quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"product_id": "quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.10-3"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"product_id": "quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.10-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"product": {
"name": "quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"product_id": "quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"product": {
"name": "quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"product_id": "quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"product_id": "quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.10-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"product": {
"name": "quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"product_id": "quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.10-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"product": {
"name": "quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"product_id": "quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.10-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"product": {
"name": "quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"product_id": "quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.10-3"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x"
},
"product_reference": "quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64"
},
"product_reference": "quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le"
},
"product_reference": "quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x"
},
"product_reference": "quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64"
},
"product_reference": "quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le"
},
"product_reference": "quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64"
},
"product_reference": "quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x"
},
"product_reference": "quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le"
},
"product_reference": "quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le"
},
"product_reference": "quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64"
},
"product_reference": "quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x"
},
"product_reference": "quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64"
},
"product_reference": "quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x"
},
"product_reference": "quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
},
"product_reference": "quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-4374",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2025-05-06T01:20:45.731000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2364267"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn\u0027t been mirrored yet, they are granted \"Admin\" permissions on the newly created repository.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "quay: Incorrect Privilege Assignment",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-4374"
},
{
"category": "external",
"summary": "RHBZ#2364267",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2364267"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-4374",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-4374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4374"
}
],
"release_date": "2025-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T15:29:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:8688"
},
{
"category": "workaround",
"details": "Permissions can be updated after creation but there\u0027s no preventative measure before hand.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "quay: Incorrect Privilege Assignment"
},
{
"cve": "CVE-2025-21605",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-04-23T16:01:41.763906+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2361883"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted, and the memory is unavailable.\n\nWhen password authentication is enabled on the Redis server but no password is provided, the client can still cause the output buffer to grow from \"NOAUTH\" responses until the system runs out of memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-21605"
},
{
"category": "external",
"summary": "RHBZ#2361883",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2361883"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-21605",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21605"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-21605",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21605"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/releases/tag/7.4.3",
"url": "https://github.com/redis/redis/releases/tag/7.4.3"
},
{
"category": "external",
"summary": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff",
"url": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff"
}
],
"release_date": "2025-04-23T15:38:11.042000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T15:29:30+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:8688"
},
{
"category": "workaround",
"details": "A workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in the following different ways:\n\n- Using network access control tools like firewalls, iptables, security groups, etc.\n- Enabling TLS and requiring users to authenticate using client side certificates.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4364858832daaa9778de8eb1057b091152db9ffefc117d08a546135ed902b5a4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:8f22e1f3575671d35aa4deffab8081d850072c029e94e81b02c3c78659b1624a_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:f7d81169cafb4b227d5f4764be0fd9ef00a2f5194ba4d3b5fddd67c97f555fe3_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2cf131394ee817442682747a80723538c26f2ecb250c3893065a65dccc413511_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:38624978696425baeddf42314643b621f6b903bfeee946ac69c9d0198ecdaa4a_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:508f8e375f6f1704dd59bf971489e793d0be4c4f5e629a27f3e04c973f18b106_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:878b284ba38f1d3c5f57b2e018c3763b24397537092c4c1764bf04ff887ee4d2_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d60083b67470bc3030c956383b959fb82632a871e72cb38c11fe5990fe5192f5_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:df8113c4686a7d33a78aa62a179428585fcf6356d714c55c689e43e2e691fbaa_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:7221f1e6f8ff98d0e6e9513c60ed48de318e48be259e903a74fa592576328b3f_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:8a8262b65a01956616ff44d49582c3020c98b09cc766a2c47c8aeaae8aae8501_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b474c538f30dc77a9232e02991b07c1221953b5220004518e13cc5760b9fc14a_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:138bb2b04af20b1e771bd882e48b72f84c27316177414302824574b10e198ece_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:14116ac30c6085a7f0a9d22e8464f8a76b3ddc1c61616d5e90ad9324295dc780_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c02735db409a59933b8219d769a5e1dc30bc699f959d7eca15fb7c0bb2d2847e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:b920d6d4955f2a71f02064066957d47df4a3cba178178e274e87299594ac208a_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:c81b1560fd999642cc2ea89cdc4883b0d768e2ef42076c5c6aaeae7675317252_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e4fd30928669f042f28669bcca0d395d8e9c8afe50e21a2e96e3a209c4c366b4_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:13cf8814856ecc0d06128f2d7ed03ab13fe2be08fb91b26994e568dc75a74722_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:37fe4dfba94a953f42b06cb17d9ca997e3c46d1c791df4900983fd36887bc620_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:ca5313b5f86c918831fdcb6ab0ee6f6b2d69e445a145f14cac50afdd0c601e0e_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0101f030419559c83de5939e2d317bf223766868c39ee6a7851a8fb15d291b6b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:1103162b299319d9ecfb7ae5a46de9fcd422bcbd933b05a96f2d34ef63e6e23a_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef65ddcffa9b2ce9f1a8f73ff2b2d8bca1f0064d983091627f6b3538d97f36f4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:082886c916ba67c9c246b6e709920e9746f342f82d703ba170f50c3ae28a58d4_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:25da22ed2c24f10555615b21d382ac523405b1dfd7112f3a076ee781da55a042_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:384129b7d7bd72cfe5307572cb2f3ff7cf81cc62c39539ad923062cd0106257b_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:801618c1aed7af43e83b5579aab6faf9e8b1ae6009143736405010cb53e268db_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:85fc7e8f26dd9a89bb0683bf38c2d492a8eb9a76e3cd1b104af6a54ce228d916_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:9db9452ae3220a9847d714a9ec25e8b735d47a56ffd07e756bf0fd44cc8b380c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…