{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 4.10.47 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.10.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat's cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.10.47. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2023:0031\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nSecurity Fix(es):\n\n* crewjam/saml: Authentication bypass when processing SAML responses\ncontaining multiple Assertion elements (CVE-2022-41912)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.\n\nAll OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available\nat https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:0032", "url": "https://access.redhat.com/errata/RHSA-2023:0032" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2149181", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2149181" }, { "category": "external", "summary": "OCPBUGS-3262", "url": "https://issues.redhat.com/browse/OCPBUGS-3262" }, { "category": "external", "summary": "OCPBUGS-4604", "url": "https://issues.redhat.com/browse/OCPBUGS-4604" }, { "category": "external", "summary": "OCPBUGS-5040", "url": "https://issues.redhat.com/browse/OCPBUGS-5040" }, { "category": "external", "summary": "OCPBUGS-5112", "url": "https://issues.redhat.com/browse/OCPBUGS-5112" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0032.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.10.47 bug fix and security update", "tracking": { "current_release_date": "2026-03-21T04:22:13+00:00", "generator": { "date": "2026-03-21T04:22:13+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.7.3" } }, "id": "RHSA-2023:0032", "initial_release_date": "2023-01-10T07:53:08+00:00", "revision_history": [ { "date": "2023-01-10T07:53:08+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-01-10T07:53:08+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-03-21T04:22:13+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.10", "product": { "name": "Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.10::el8" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "product": { "name": "openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "product_id": "openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-coredns&tag=v4.10.0-202212221024.p0.g6c03251.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "product": { "name": "openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "product_id": "openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-grafana&tag=v4.10.0-202301040925.p0.gca476d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "product": { "name": "openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "product_id": "openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-jenkins&tag=v4.10.0-202212221134.p0.g30f4d11.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "product": { "name": "openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "product_id": "openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-installer-artifacts&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "product": { "name": "openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "product_id": "openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-installer&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "product": { "name": "openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "product_id": "openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-machine-os-images-rhel8&tag=v4.10.0-202212221404.p0.g09a132b.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "product": { "name": "openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "product_id": "openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "product_identification_helper": { "purl": "pkg:oci/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f?arch=amd64&repository_url=registry.redhat.io/openshift4/network-tools-rhel8&tag=v4.10.0-202212250224.p0.gbcfec9c.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "product": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "product_id": "openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel8&tag=v4.10.0-202212211634.p0.g67425d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "product": { "name": "openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "product_id": "openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791?arch=amd64&repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes&tag=v4.10.0-202212250224.p0.g8bafd8c.assembly.stream" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "product": { "name": "openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "product_id": "openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-coredns&tag=v4.10.0-202212221024.p0.g6c03251.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "product": { "name": "openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "product_id": "openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-grafana&tag=v4.10.0-202301040925.p0.gca476d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "product": { "name": "openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "product_id": "openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-jenkins&tag=v4.10.0-202212221134.p0.g30f4d11.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "product": { "name": "openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "product_id": "openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-installer-artifacts&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "product": { "name": "openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "product_id": "openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-installer&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "product": { "name": "openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "product_id": "openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "product_identification_helper": { "purl": "pkg:oci/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1?arch=s390x&repository_url=registry.redhat.io/openshift4/network-tools-rhel8&tag=v4.10.0-202212250224.p0.gbcfec9c.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "product": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "product_id": "openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel8&tag=v4.10.0-202212211634.p0.g67425d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "product": { "name": "openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "product_id": "openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6?arch=s390x&repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes&tag=v4.10.0-202212250224.p0.g8bafd8c.assembly.stream" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "product": { "name": "openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "product_id": "openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-coredns&tag=v4.10.0-202212221024.p0.g6c03251.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64", "product": { "name": "openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64", "product_id": "openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-grafana&tag=v4.10.0-202301040925.p0.gca476d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "product": { "name": "openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "product_id": "openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-jenkins&tag=v4.10.0-202212221134.p0.g30f4d11.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "product": { "name": "openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "product_id": "openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-installer-artifacts&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "product": { "name": "openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "product_id": "openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-installer&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "product": { "name": "openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "product_id": "openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "product_identification_helper": { "purl": "pkg:oci/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796?arch=arm64&repository_url=registry.redhat.io/openshift4/network-tools-rhel8&tag=v4.10.0-202212250224.p0.gbcfec9c.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "product": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "product_id": "openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel8&tag=v4.10.0-202212211634.p0.g67425d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "product": { "name": "openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "product_id": "openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "product_identification_helper": { "purl": "pkg:oci/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5?arch=arm64&repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes&tag=v4.10.0-202212250224.p0.g8bafd8c.assembly.stream" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "product": { "name": "openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "product_id": "openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-coredns&tag=v4.10.0-202212221024.p0.g6c03251.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "product": { "name": "openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "product_id": "openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-grafana&tag=v4.10.0-202301040925.p0.gca476d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "product": { "name": "openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "product_id": "openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-jenkins&tag=v4.10.0-202212221134.p0.g30f4d11.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "product": { "name": "openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "product_id": "openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-installer-artifacts&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "product": { "name": "openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "product_id": "openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-installer&tag=v4.10.0-202212221404.p0.gdd5f512.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "product": { "name": "openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "product_id": "openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "product_identification_helper": { "purl": "pkg:oci/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035?arch=ppc64le&repository_url=registry.redhat.io/openshift4/network-tools-rhel8&tag=v4.10.0-202212250224.p0.gbcfec9c.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "product": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "product_id": "openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-openshift-apiserver-rhel8&tag=v4.10.0-202212211634.p0.g67425d4.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le", "product": { "name": "openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le", "product_id": "openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb?arch=ppc64le&repository_url=registry.redhat.io/openshift4/ose-ovn-kubernetes&tag=v4.10.0-202212250224.p0.g8bafd8c.assembly.stream" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le" }, "product_reference": "openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64" }, "product_reference": "openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64" }, "product_reference": "openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x" }, "product_reference": "openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64" }, "product_reference": "openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le" }, "product_reference": "openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x" }, "product_reference": "openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64" }, "product_reference": "openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x" }, "product_reference": "openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64" }, "product_reference": "openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le" }, "product_reference": "openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64" }, "product_reference": "openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le" }, "product_reference": "openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64" }, "product_reference": "openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64" }, "product_reference": "openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x" }, "product_reference": "openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64" }, "product_reference": "openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64" }, "product_reference": "openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le" }, "product_reference": "openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x" }, "product_reference": "openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le" }, "product_reference": "openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64" }, "product_reference": "openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64" }, "product_reference": "openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x" }, "product_reference": "openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64" }, "product_reference": "openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64" }, "product_reference": "openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64" }, "product_reference": "openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x" }, "product_reference": "openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le" }, "product_reference": "openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x" }, "product_reference": "openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64" }, "product_reference": "openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64 as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64" }, "product_reference": "openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "relates_to_product_reference": "8Base-RHOSE-4.10" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le as a component of Red Hat OpenShift Container Platform 4.10", "product_id": "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le" }, "product_reference": "openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.10" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-41912", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2022-11-29T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "8Base-RHOSE-4.10:openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2149181" } ], "notes": [ { "category": "description", "text": "An authentication bypass flaw was discovered in the crewjam/saml go package. A remote unauthenticated attacker could trigger it by sending a SAML request. This would allow an escalation of privileges and then enable compromising system integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements", "title": "Vulnerability summary" }, { "category": "other", "text": "Whilst the Red Hat Advanced Cluster Management for Kubernetes (RHACM) acm-grafana container include the vulnerable underscore library, the access to it is protected by OpenShift OAuth. Therefore the impact by this flaw is reduced from Critical to Important.\n\nThe OCP grafana-container includes the vulnerable underscore library, the access to it is protected by OpenShift OAuth. Therefore the impact by this flaw is reduced from Critical to Important.\n\nWhile Red Hat Ceph Storage 4's grafana-container includes the affected code, this is used for logging and limits access to the rest of the Ceph cluster. Thus the impact has been reduced from critical to important. Red Hat Ceph Storage 3 and 4 do not use crewjam/saml in their version of grafana.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64" ], "known_not_affected": [ "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "8Base-RHOSE-4.10:openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-41912" }, { "category": "external", "summary": "RHBZ#2149181", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2149181" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-41912", "url": "https://www.cve.org/CVERecord?id=CVE-2022-41912" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-41912", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41912" }, { "category": "external", "summary": "https://github.com/crewjam/saml/security/advisories/GHSA-j2jp-wvqg-wc2g", "url": "https://github.com/crewjam/saml/security/advisories/GHSA-j2jp-wvqg-wc2g" } ], "release_date": "2022-11-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-01-10T07:53:08+00:00", "details": "For OpenShift Container Platform 4.10 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags\n\nThe sha values for the release are:\n\n(For x86_64 architecture)\nThe image digest is sha256:bb0d33862d3f550474d5c34e6bc379c095337eff9d3c3c3eac0787a4b9e7140a\n\n(For s390x architecture)\nThe image digest is sha256:44effd72d85281ac3fdbcb3485d7d1653dad136f215ef9b15a2f468706fe479d\n\n(For ppc64le architecture)\nThe image digest is sha256:89cc2124e59e73318f145de7bc738032976a5f4d0a416ff1109b34b201fa2db8\n\n(For aarch64 architecture)\nThe image digest is sha256:cce182ed4d3fbc245163a5bb40630a98cd4eada70b5173d80434be48758bd8ce\n\nAll OpenShift Container Platform 4.10 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift Console\nor the CLI oc command. Instructions for upgrading a cluster are available\nat\nhttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:0032" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:2f2c2be1b97c09f241f03ff7d95ea3b70b7890a6f3d1c0e5f84def067fbc9035_ppc64le", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:44b9a12ae0b7f4ab8aa2d3950e3a5051b22fd021e04d0239c2c9dedf9093e796_arm64", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:477c6bfde1733bd133b32df1d2cf6e2669e2e462f2732740a1325cd672342c2f_amd64", "8Base-RHOSE-4.10:openshift4/network-tools-rhel8@sha256:8573b14ea58d4d872f0ec62350f889d86da8711bbe1b54d561be180223a8b6b1_s390x", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:03d40f7d5514667ddb87d2f354fd13a110b9b7e442d314047240773d9a98ad1d_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:111c80bd72edf30547ef6ab2cb9466aa23487f98513d507df8ac4f4061cafafb_arm64", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:3913c06abb63775de5990f1e1a293046337fe791adc625b3b84b1d87f1e617d1_amd64", "8Base-RHOSE-4.10:openshift4/ose-baremetal-installer-rhel8@sha256:4fae6e85d56397bcf446e8321b3ec20b981b8ab01b3ae8ec38f95f20ef89ba04_s390x", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:1a48579f26ed0fef40069a14b9b95a3062db29bec31c0426136161f40ee18314_amd64", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:2f792595bb47820f42a7cb86946232ede38a080f71a8dcd70472fa5f0ba17878_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:a183b9a24e62b41660b9a435202d3f85c68bbb444dd681d9da46f3eae53659ef_s390x", "8Base-RHOSE-4.10:openshift4/ose-coredns@sha256:ab19b79dc90a49aa4247b3d8a9e31233439a2f91fdea3b21a630020c1eb26dbd_arm64", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:852aef249879dd4764ba1b1ff7f13f3fec0db30b4fcde4905c438b67bf3a6aa6_s390x", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:8699c2d0eaf805462510f70e326f4d495b109572df73e7361593263e889e6107_amd64", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:b927822381bdccdfc57efc1f4cffc40a781597a67a6ccacc624ec1e124c1014b_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:e0dbeabb7c6f607eb5384a7636af342047cc922ab62cba892f752ae0d2c4e927_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:22730c4e8968b3de3250aa88dbadace1b1bfb6f829e59acd524eca4da44ebe93_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:5f4bf22946d33bc45a1e0f16097ca56fab6344c937866a49ff1128c22a68b28c_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:6ea7a438fc15d7594a2204cfc90ae73a17e36bfc4fddb8586076805abb2fa2e6_amd64", "8Base-RHOSE-4.10:openshift4/ose-installer-artifacts@sha256:ecf132565c23974b8a88b6bd20d62124dcd6ec22656f64bc8a33f8023f34d5a2_s390x", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:09ec2533c7349c33124749348ee09a38563d6e4dde9ed52771e7d39fb9e57f99_arm64", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:27dd157420a0b111776a4fa2804a4b96f38cacb179a28faa7fde29426c0a4665_amd64", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:8edea16f50b48402169d88397db24820e75db8e047e4cad977a897f65ca4d247_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-installer@sha256:c2474f55e91e9ca0d23539e4c4ca76d40253ff4f6b98714a7ad4b754b68c1441_s390x", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:2ccf4b361b12b26f98917c783802b9579bb718c003db07626e44f0a48eb63202_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:403f508fac0b60ffbe94305d0207d445b2ef9f8e8213dddf2e270cd8aab39c60_arm64", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:ddc8129bfaf77caabfaf300b9fe74539cd28816b483db25eb39e43cdc45b5a45_amd64", "8Base-RHOSE-4.10:openshift4/ose-jenkins@sha256:e7e167fb7a1da4915352db4c3b880e16600609f51aa3298c804754d1aebb1498_s390x", "8Base-RHOSE-4.10:openshift4/ose-machine-os-images-rhel8@sha256:17a5e708b71ea8926a4973309c9382b1c6e134dfcb2ba4e029c851f60857133b_amd64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:4e00dae6f99334c436691dcc84477a2825fa9b9bee7bbcdb6c41f52ee8752954_arm64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:bb0d12d26b7c9904681a61c359763d06528df582965d2c28ff5423f2ad2138f3_amd64", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:ccea77045951bfbe42db01e45e8ae07f5354cde3cd38ea6712d2db4add53f9c7_s390x", "8Base-RHOSE-4.10:openshift4/ose-openshift-apiserver-rhel8@sha256:dce1479b0dd91cce21185c924f31a5558943b74d9cf6258e7e5bc775d6e8ad1d_ppc64le", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:147592ec0d9bc7cfa4c47e0febf21499eef786eca0cd6d3225b71671b56c0fa6_s390x", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:64b2bcf2d11e1c3242e44c631bbeecf1a43fa47b9b9e08c00e959f03d7eff791_amd64", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:69d6b0541e2c5147328b90ea6aac6b081f2c81332d43762e028c613ec7655ac5_arm64", "8Base-RHOSE-4.10:openshift4/ose-ovn-kubernetes@sha256:dbba82b79a4a47556faf2708a3a65a3206524f1cf9c9ae072dfd2d0546a5fcfb_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements" } ] }