RHSA-2024_10908
Vulnerability from csaf_redhat - Published: 2024-12-10 08:27 - Updated: 2024-12-18 05:03Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7
Severity
Moderate
Notes
Topic: Red Hat OpenShift Service Mesh Containers for 2.5.7
This update has a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation.
Security Fix(es):
* kiali-ossmc-container: regular expression denial of service (CVE-2024-21538)
* openshift-istio-kiali-rhel8-container: regular expression denial of service (CVE-2024-21538)
* openshift-istio-kiali-rhel8-container: Improper input validation in PostCSS (CVE-2023-44270)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.
5.3 (Medium)
Vendor Fix
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:10908
Workaround
There's no known mitigation for this issue. Red Hat recommends to not parse untrusted CSS input using PostCSS.
A Regular Expression Denial of Service (ReDoS) vulnerability was found in the cross-spawn package for Node.js. Due to improper input sanitization, an attacker can increase CPU usage and crash the program with a large, specially crafted string.
4.4 (Medium)
Vendor Fix
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:10908
References
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Service Mesh Containers for 2.5.7\n\nThis update has a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Service Mesh is Red Hat\u0027s distribution of the Istio service mesh project, tailored for installation into an OpenShift Container Platform installation.\n\nSecurity Fix(es):\n\n* kiali-ossmc-container: regular expression denial of service (CVE-2024-21538)\n* openshift-istio-kiali-rhel8-container: regular expression denial of service (CVE-2024-21538)\n* openshift-istio-kiali-rhel8-container: Improper input validation in PostCSS (CVE-2023-44270)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:10908",
"url": "https://access.redhat.com/errata/RHSA-2024:10908"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2324550",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2324550"
},
{
"category": "external",
"summary": "2326998",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2326998"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10908.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7",
"tracking": {
"current_release_date": "2024-12-18T05:03:43+00:00",
"generator": {
"date": "2024-12-18T05:03:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:10908",
"initial_release_date": "2024-12-10T08:27:47+00:00",
"revision_history": [
{
"date": "2024-12-10T08:27:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-12-10T08:27:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-18T05:03:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHOSSM 2.5 for RHEL 8",
"product": {
"name": "RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:2.5::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"product": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"product_id": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1.73.16-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"product": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.5.7-3"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"product": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"product_id": "openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"product": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"product_id": "openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.73.17-1"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"product": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"product_id": "openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"product": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.5.7-5"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le",
"product": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le",
"product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.5.7-3"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"product": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"product_id": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1.73.16-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"product": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.5.7-3"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"product": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"product_id": "openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"product": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"product_id": "openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.73.17-1"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"product": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"product_id": "openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"product": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.5.7-5"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"product": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.5.7-3"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"product": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"product_id": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1.73.16-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"product": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.5.7-3"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"product": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"product_id": "openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"product": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"product_id": "openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.73.17-1"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"product": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"product_id": "openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"product_identification_helper": {
"purl": "pkg:oci/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"product": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"product_identification_helper": {
"purl": "pkg:oci/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.5.7-5"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"product": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.5.7-3"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"product": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"product_id": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1.73.16-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"product": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"product_id": "openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel8\u0026tag=2.5.7-3"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"product": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"product_id": "openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/grafana-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"product": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"product_id": "openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1.73.17-1"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"product": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"product_id": "openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/pilot-rhel8\u0026tag=2.5.7-2"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"product": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"product_id": "openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"product_identification_helper": {
"purl": "pkg:oci/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/proxyv2-rhel8\u0026tag=2.5.7-5"
}
}
},
{
"category": "product_version",
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"product": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"product_id": "openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/ratelimit-rhel8\u0026tag=2.5.7-3"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x"
},
"product_reference": "openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64"
},
"product_reference": "openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le"
},
"product_reference": "openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64"
},
"product_reference": "openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x"
},
"product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64"
},
"product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le"
},
"product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64"
},
"product_reference": "openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64"
},
"product_reference": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le"
},
"product_reference": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x"
},
"product_reference": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64"
},
"product_reference": "openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64"
},
"product_reference": "openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64"
},
"product_reference": "openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x"
},
"product_reference": "openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le"
},
"product_reference": "openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x"
},
"product_reference": "openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le"
},
"product_reference": "openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64"
},
"product_reference": "openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64"
},
"product_reference": "openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64"
},
"product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x"
},
"product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64"
},
"product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le"
},
"product_reference": "openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x"
},
"product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64"
},
"product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64 as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64"
},
"product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le as a component of RHOSSM 2.5 for RHEL 8",
"product_id": "8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
},
"product_reference": "openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le",
"relates_to_product_reference": "8Base-RHOSSM-2.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-44270",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2024-11-18T14:11:50.400987+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2326998"
}
],
"notes": [
{
"category": "description",
"text": "An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "PostCSS: Improper input validation in PostCSS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-44270"
},
{
"category": "external",
"summary": "RHBZ#2326998",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2326998"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-44270",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44270"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-44270",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44270"
},
{
"category": "external",
"summary": "https://github.com/github/advisory-database/issues/2820",
"url": "https://github.com/github/advisory-database/issues/2820"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/blob/main/lib/tokenize.js#L25",
"url": "https://github.com/postcss/postcss/blob/main/lib/tokenize.js#L25"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5",
"url": "https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/releases/tag/8.4.31",
"url": "https://github.com/postcss/postcss/releases/tag/8.4.31"
}
],
"release_date": "2023-09-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-10T08:27:47+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10908"
},
{
"category": "workaround",
"details": "There\u0027s no known mitigation for this issue. Red Hat recommends to not parse untrusted CSS input using PostCSS.",
"product_ids": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "PostCSS: Improper input validation in PostCSS"
},
{
"cve": "CVE-2024-21538",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-11-08T13:44:29.182678+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2324550"
}
],
"notes": [
{
"category": "description",
"text": "A Regular Expression Denial of Service (ReDoS) vulnerability was found in the cross-spawn package for Node.js. Due to improper input sanitization, an attacker can increase CPU usage and crash the program with a large, specially crafted string.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cross-spawn: regular expression denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-21538"
},
{
"category": "external",
"summary": "RHBZ#2324550",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2324550"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-21538",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21538"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-21538",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21538"
},
{
"category": "external",
"summary": "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff",
"url": "https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff"
},
{
"category": "external",
"summary": "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f",
"url": "https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f"
},
{
"category": "external",
"summary": "https://github.com/moxystudio/node-cross-spawn/pull/160",
"url": "https://github.com/moxystudio/node-cross-spawn/pull/160"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230",
"url": "https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230"
}
],
"release_date": "2024-11-08T05:00:04.695000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-10T08:27:47+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10908"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:33e4fdbbf154909d18390fed53c4bcc4babf5977e193fdca05e072920ca31fe6_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:92f0492675293f748707aeeadb2a1bb61c8ba2b22cfef61219c7dbc566494ef5_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:930c1bf27855cae0d310378a7b3c9d3d90cb387bb63fe1faa396aa849cc18871_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/grafana-rhel8@sha256:95b4c7126430eba412434b59f69ff7be7530cb29e375010246ee94dec28bffbe_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:06b141f66f12abd830c5a0467942976ac915fc6ab6c07be87968de36831b844d_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:17a2e232eea8d25d6a6f5e16f0b1c62688fb5cb78ab291d228b559896f66fe07_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:2970ea16ea4e83dca64c8a24cfe7fd49a68d8a90313885ef75a28df64f01a5f0_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/istio-cni-rhel8@sha256:32f1666a614eb515a908017441536f88cfe62cf1bc2a873c9a56246534b27b10_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:1305d0cf582626872f4cbff79d4cbbfab463fd5966b362dc2ea378b904dcd26e_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:27cd1b95e89cb2bff31a7cb54a7e32775c6e380d9fc4fbc81d80610f4e864715_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:519e79e620ed329091b262235d3cbd917dc407e8102d08a6e75d75c45f556559_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-ossmc-rhel8@sha256:a6155850d6616892f4dde572d473b77c33dcba9c906cafdf9c7096f19a7cf768_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:35172a3af6954e6230749d3deceffd72265dd3b4f1c14825234048c9977f49c0_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:7c7de8c9cb69adc723612d39680a9f4fd1a874cd65ff8711d179e6dbe82eba42_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:9dd1a11b90f887678ab7b2f10e55b33cc16a19b9ee245c02a1267c9232fb2e3f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/kiali-rhel8@sha256:bb6ea50838393af09b0b419186c2cecf9ed2cda9b3226d7792a4dc1e7aeff935_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:09e1ab6607a6182800880c7186660342531ab929cf948043ed4d496aa637ba28_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:4fec853a7d8c5c3251f46924d28f4ccdc3dd0133e58429f328692d3a3ae504a4_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:a2eb4754633a9e503eb0917a9436c887d52fa6e8dce13693f7f1cc820f87089b_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/pilot-rhel8@sha256:f375c15592d67b6ea42a853ce9d9003fdc7559aa3c9383ca93c528c66db3a4fc_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:9414beb2c77ddc54c49b47e9e5a5faccc59515cf8e7dd36fad5d453d6d2fa456_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:be179c679733d4f22c0339455053faa275c44c4f63ddcf68201d2bf9ca7fcb88_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:df125a8adc5b35acbeb4e9525a39e853724db43361f5a2f0b278df49e7aaaf1a_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/proxyv2-rhel8@sha256:e3c8efe0b0b41bf0b75e025fad0a94e1b8a937aaa391ce459d05dee811c74e4e_ppc64le",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:356c8fb518784764a04e25c6aff2c1b447d7014234f8d9102a0ceb1325e96d1f_s390x",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:7712ffc35a618f03ea22f95f6f290c9cda68c222912d0d0d682df518f63fd5ee_amd64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:77432392ca3e87d5bbe35b700df19699bf7e4bd78439829edcc437b1361c22e7_arm64",
"8Base-RHOSSM-2.5:openshift-service-mesh/ratelimit-rhel8@sha256:c7d747212f5bf832c3506fea424750c96fed4cf3802e9ff8985cb2c7ca325486_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "cross-spawn: regular expression denial of service"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…