rhsa-2025:0522
Vulnerability from csaf_redhat
Published
2025-01-21 15:04
Modified
2025-02-20 11:26
Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release
Notes
Topic
A new version of Red Hat OpenShift distributed tracing platform (Jaeger) has been released
Details
Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is used for monitoring and troubleshooting microservices-based distributed systems.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Red Hat OpenShift distributed tracing platform (Jaeger) has been released",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is used for monitoring and troubleshooting microservices-based distributed systems.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:0522",
"url": "https://access.redhat.com/errata/RHSA-2025:0522"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/distributed_tracing/distributed-tracing-platform-jaeger",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/distributed_tracing/distributed-tracing-platform-jaeger"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0522.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release",
"tracking": {
"current_release_date": "2025-02-20T11:26:46+00:00",
"generator": {
"date": "2025-02-20T11:26:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.3.1"
}
},
"id": "RHSA-2025:0522",
"initial_release_date": "2025-01-21T15:04:18+00:00",
"revision_history": [
{
"date": "2025-01-21T15:04:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-01-21T15:04:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-02-20T11:26:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.4",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.4::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-agent-rhel8@sha256%3A8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-all-in-one-rhel8@sha256%3Acb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-operator-bundle@sha256%3A665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-collector-rhel8@sha256%3A46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-index-cleaner-rhel8@sha256%3A56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-rollover-rhel8@sha256%3Af62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-ingester-rhel8@sha256%3A51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-rhel8-operator@sha256%3A7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"product_id": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-query-rhel8@sha256%3A1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-agent-rhel8@sha256%3A36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-all-in-one-rhel8@sha256%3Addddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-collector-rhel8@sha256%3A86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-index-cleaner-rhel8@sha256%3A7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-rollover-rhel8@sha256%3Ae4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-ingester-rhel8@sha256%3A896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-rhel8-operator@sha256%3A21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"product_id": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-query-rhel8@sha256%3Ae2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-agent-rhel8@sha256%3Af0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-all-in-one-rhel8@sha256%3A3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-collector-rhel8@sha256%3Aa8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-index-cleaner-rhel8@sha256%3A1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-rollover-rhel8@sha256%3A28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-ingester-rhel8@sha256%3A7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-rhel8-operator@sha256%3A3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"product_id": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-query-rhel8@sha256%3Ae43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-agent-rhel8@sha256%3Afa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-all-in-one-rhel8@sha256%3Aed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-collector-rhel8@sha256%3A5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-index-cleaner-rhel8@sha256%3Af9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-es-rollover-rhel8@sha256%3Aa63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-ingester-rhel8@sha256%3Ab859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-rhel8-operator@sha256%3Ab48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"product_id": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jaeger-query-rhel8@sha256%3Aeaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64 as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x as a component of Red Hat OpenShift distributed tracing 3.4",
"product_id": "Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 and 9 marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-21T15:04:18+00:00",
"details": "For details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/h tml/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0522"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-21T15:04:18+00:00",
"details": "For details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.17/h tml/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0522"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:36911a85237e694a9d25b1d552099ac7b8857885df699321b342e896d6cda2a2_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:8aaadb49a5e00db67cd07a54ad5c2ab1867a0e381cf55e844f6a136eaa53ab37_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:f0467dba748db0e36cba44258502f2fe64806444a50f4684d0d1078d34932a6f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:fa02064a1c6f5571ce31054e66ea21c67bfed03fa8309182e0e2380e3249c960_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3e3d042ca0846b586fd71f1ebb031cca079b2fa7a30dbf71f809b6bcb910244b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:cb0c08a16a23196aaee5a3465b96eb9ea20a6867bd2fff35368563c2184dc762_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ddddee551b77222714cd9a9e47752e171cc900623bd77800269dead71452fe72_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ed7a17795034bc7a7727557fb002fdeb2ba32cd19afb13726567dd4231517031_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:46fa583c12ade492eac2b7f21f22554af4647dd6383a5e2f8f5fc44929a746b5_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:5ed2e26a0997a3c9707851370dd701f1b921683c250f22dd8fbf42fa2ba504df_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:86434a3a8b3213be2f9e5937d3bfc956e843a8c5e3434db5309f413b8d505b8c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a8baa99bcc8a138eac44c74dd93dc67399d39124266f193fb4bb6152b2168909_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:1f153c0a469504735e08a6ca0b4f2c40abd2544ddcaf8d319ebc184ca90fbb5e_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:56e4c319d7c125148913e556564adc4a463cc6ec9763f8acc3c25dd2030b174a_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:7619729065c5e34d88cfdaab6ed2fded897921e463d767b5d15b6d182e9e05a7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:f9cec96a7c2d3f78d39b801d4fc1849e9b81cd0b07d8646ec26d75e8dd60a0ad_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:28ba5c7fea09ad97ab13905092e49790a1462371588fc1372d7dd46b4ca09b7b_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:a63888f881b136cfaf7a4ee8f3498dd508a117363035385bebe361463bd1425c_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:e4c891e4398e4b555d66a1c8fa5e38ce75b3105eda3e86b6cfac5807fb30714c_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:f62e2ec352dfbb90d2130f3197c0a4347fa5c60c383fdd07dbcc520d6a1c28c4_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:51354e4725847b641213aa4e7a1582131d81bc1b0a0613cfd97941087c80aaa0_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:7b8a8d0473bd85405ebaa62a37458dbe0a48bd0b2963af9fcf09a5642fef2cdb_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:896db45925184a018bd68e966b83f5257730843832e3f3cc024bcf196f73b418_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:b859148721ef0e1858586cc34ed89d005c64167e340de3a7702090c89d9d1209_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:665af6eb855ed08e7838035e6748f3a137ae6801023a93c82fcaff4b736fd317_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:1f13668479ff701caaf6bc9d3ff27234ceecf6f10eed81dc5ece1b380b4e15f3_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e2ce69e75bf84535e96496d401a16a45bb6685e622f5b327d69d5afdf22519e7_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:e43141b1a9c43505ed9e993d146949b7408dd957e5006c497122278ed1f61588_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:eaea4dc18044bfaaa1991ed68d8e9364c5ed2c90611270ed107e0a63a4a77fbc_s390x",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:21ca09549d861d2525d5eecc22cd2be58bc6a497d75e63c27ae9a943e6315994_arm64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:3087b2c66b04b6877bbd7c104c70cea5f7c692b6137c96751ccbff726886676f_ppc64le",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:7401dc7124e10ef4d9c8dc195c975543551c55b211e253a1ff19ae6586b43032_amd64",
"Red Hat OpenShift distributed tracing 3.4:registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:b48ab8e510e1f9a632a6fbf08cbebeb30597f29a199473022f3b4550684587a4_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.