{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat Quay 3.13.3 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Quay 3.13.3", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHBA-2025:0301", "url": "https://access.redhat.com/errata/RHBA-2025:0301" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_0301.json" } ], "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.13.3 bug fix release", "tracking": { "current_release_date": "2026-08-21T20:39:26+00:00", "generator": { "date": "2026-08-21T20:39:26+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.16" } }, "id": "RHBA-2025:0301", "initial_release_date": "2025-01-20T10:26:26+00:00", "revision_history": [ { "date": "2025-01-20T10:26:26+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-01-20T10:26:26+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-08-21T20:39:26+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Quay v3", "product": { "name": "Quay v3", "product_id": "8Base-Quay-3", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3::el8" } } } ], "category": "product_family", "name": "Red Hat Quay" }, { "branches": [ { "category": "product_version", "name": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "product": { "name": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "product_id": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363?arch=amd64&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "product": { "name": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "product_id": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167?arch=amd64&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "product": { "name": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "product_id": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075?arch=amd64&repository_url=registry.redhat.io/quay/quay-builder-rhel8&tag=v3.13.3-3" } } }, { "category": "product_version", "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "product": { "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235?arch=amd64&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "product": { "name": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "product_id": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "product_identification_helper": { "purl": "pkg:oci/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee?arch=amd64&repository_url=registry.redhat.io/quay/clair-rhel8&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "product": { "name": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "product_id": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd?arch=amd64&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "product": { "name": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "product_id": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770?arch=amd64&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "product": { "name": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "product_id": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634?arch=amd64&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=v3.13.3-7" } } }, { "category": "product_version", "name": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "product": { "name": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "product_id": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e?arch=amd64&repository_url=registry.redhat.io/quay/quay-operator-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "product": { "name": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "product_id": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "product_identification_helper": { "purl": "pkg:oci/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6?arch=amd64&repository_url=registry.redhat.io/quay/quay-rhel8&tag=v3.13.3-6" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "product": { "name": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "product_id": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7?arch=s390x&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "product": { "name": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "product_id": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33?arch=s390x&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "product": { "name": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "product_id": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530?arch=s390x&repository_url=registry.redhat.io/quay/quay-builder-rhel8&tag=v3.13.3-3" } } }, { "category": "product_version", "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "product": { "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57?arch=s390x&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "product": { "name": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "product_id": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "product_identification_helper": { "purl": "pkg:oci/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075?arch=s390x&repository_url=registry.redhat.io/quay/clair-rhel8&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "product": { "name": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "product_id": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce?arch=s390x&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "product": { "name": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "product_id": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127?arch=s390x&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "product": { "name": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "product_id": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01?arch=s390x&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=v3.13.3-7" } } }, { "category": "product_version", "name": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "product": { "name": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "product_id": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0?arch=s390x&repository_url=registry.redhat.io/quay/quay-operator-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x", "product": { "name": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x", "product_id": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x", "product_identification_helper": { "purl": "pkg:oci/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc?arch=s390x&repository_url=registry.redhat.io/quay/quay-rhel8&tag=v3.13.3-6" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "product": { "name": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "product_id": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "product": { "name": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "product_id": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "product": { "name": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "product_id": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-builder-rhel8&tag=v3.13.3-3" } } }, { "category": "product_version", "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "product": { "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "product": { "name": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "product_id": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "product_identification_helper": { "purl": "pkg:oci/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd?arch=ppc64le&repository_url=registry.redhat.io/quay/clair-rhel8&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "product": { "name": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "product_id": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "product": { "name": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "product_id": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8&tag=v3.13.3-2" } } }, { "category": "product_version", "name": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "product": { "name": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "product_id": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-operator-bundle&tag=v3.13.3-7" } } }, { "category": "product_version", "name": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "product": { "name": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "product_id": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-operator-rhel8&tag=v3.13.3-1" } } }, { "category": "product_version", "name": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "product": { "name": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "product_id": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "product_identification_helper": { "purl": "pkg:oci/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f?arch=ppc64le&repository_url=registry.redhat.io/quay/quay-rhel8&tag=v3.13.3-6" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le" }, "product_reference": "quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x" }, "product_reference": "quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64" }, "product_reference": "quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64" }, "product_reference": "quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x" }, "product_reference": "quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le" }, "product_reference": "quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le" }, "product_reference": "quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64" }, "product_reference": "quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x" }, "product_reference": "quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x" }, "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le" }, "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64" }, "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x" }, "product_reference": "quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64" }, "product_reference": "quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le" }, "product_reference": "quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64" }, "product_reference": "quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x" }, "product_reference": "quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le" }, "product_reference": "quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le" }, "product_reference": "quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64" }, "product_reference": "quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x" }, "product_reference": "quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x" }, "product_reference": "quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64" }, "product_reference": "quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le" }, "product_reference": "quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x" }, "product_reference": "quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64" }, "product_reference": "quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le" }, "product_reference": "quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le" }, "product_reference": "quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64 as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64" }, "product_reference": "quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "relates_to_product_reference": "8Base-Quay-3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x as a component of Quay v3", "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" }, "product_reference": "quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x", "relates_to_product_reference": "8Base-Quay-3" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-45337", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "discovery_date": "2024-12-11T19:00:54.247490+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2331720" } ], "notes": [ { "category": "description", "text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application's handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 & 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-45337" }, { "category": "external", "summary": "RHBZ#2331720", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337", "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337" }, { "category": "external", "summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909", "url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909" }, { "category": "external", "summary": "https://go.dev/cl/635315", "url": "https://go.dev/cl/635315" }, { "category": "external", "summary": "https://go.dev/issue/70779", "url": "https://go.dev/issue/70779" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ", "url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2024-3321", "url": "https://pkg.go.dev/vuln/GO-2024-3321" } ], "release_date": "2024-12-11T18:55:58.506000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-20T10:26:26+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:0301" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto" }, { "cve": "CVE-2024-55565", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition ('Infinite Loop')" }, "discovery_date": "2024-12-09T02:00:45.255738+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2331063" } ], "notes": [ { "category": "description", "text": "A flaw was found in nanoid. Affected versions of nanoid mishandles non-integer values. When nanoid is called with a fractional value, there were a number of undesirable effects:\n\n- In browser and non-secure, the code infinite loops on while (size--)\n- In node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled: when i is initialized to poolOffset, pool[i] & 63 -> undefined & 63 -> 0\n- If the first call in node is a fractional argument, the initial buffer allocation fails with an error\n\nThe highest impact of this issue system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nanoid: nanoid mishandles non-integer values", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-55565" }, { "category": "external", "summary": "RHBZ#2331063", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331063" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-55565", "url": "https://www.cve.org/CVERecord?id=CVE-2024-55565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565" }, { "category": "external", "summary": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8", "url": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8" }, { "category": "external", "summary": "https://github.com/ai/nanoid/pull/510", "url": "https://github.com/ai/nanoid/pull/510" }, { "category": "external", "summary": "https://github.com/ai/nanoid/releases/tag/5.0.9", "url": "https://github.com/ai/nanoid/releases/tag/5.0.9" } ], "release_date": "2024-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-20T10:26:26+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:0301" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nanoid: nanoid mishandles non-integer values" }, { "cve": "CVE-2024-56201", "cwe": { "id": "CWE-150", "name": "Improper Neutralization of Escape, Meta, or Control Sequences" }, "discovery_date": "2024-12-23T16:00:38.768252+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2333854" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: Jinja has a sandbox breakout through malicious filenames", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability has rated as a IMPORTANT flaw because an attacker controlling both the template content and filename to execute arbitrary Python code, bypassing the sandbox.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56201" }, { "category": "external", "summary": "RHBZ#2333854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56201", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56201" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201" }, { "category": "external", "summary": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f", "url": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f" }, { "category": "external", "summary": "https://github.com/pallets/jinja/issues/1792", "url": "https://github.com/pallets/jinja/issues/1792" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5", "url": "https://github.com/pallets/jinja/releases/tag/3.1.5" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699" } ], "release_date": "2024-12-23T15:37:36.110000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-20T10:26:26+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:0301" }, { "category": "workaround", "details": "To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.", "product_ids": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "jinja2: Jinja has a sandbox breakout through malicious filenames" }, { "cve": "CVE-2024-56326", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "discovery_date": "2024-12-23T16:00:46.619763+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2333856" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, storing a reference to a malicious string's format method is possible, then passing that to a filter that calls it. No such filters are built into Jinja but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: Jinja has a sandbox breakout through indirect reference to format method", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is rated as Moderate due to an oversight in Jinja's sandbox environment, allowing attackers to execute arbitrary Python code through controlled template content. This requires control over template content, making exploitation possible only in specific applications, thus limiting its overall impact.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56326" }, { "category": "external", "summary": "RHBZ#2333856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56326", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56326" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326" }, { "category": "external", "summary": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4", "url": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5", "url": "https://github.com/pallets/jinja/releases/tag/3.1.5" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h" } ], "release_date": "2024-12-23T15:43:49.400000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-20T10:26:26+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:0301" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-Quay-3:quay/clair-rhel8@sha256:3371dcf3951d8f02b5d8f4d99415924e8b3992991a6d5b25ceb8079cf95146dd_ppc64le", "8Base-Quay-3:quay/clair-rhel8@sha256:6107c0c746da8c76756cbc0e6961e9841e3cc183da276cec47688388d9f1b075_s390x", "8Base-Quay-3:quay/clair-rhel8@sha256:8941704f291926c2bfe30ecfd0db831fa2db5665d19b53a4c9763303f878dfee_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2d84c6465981349e9b24af08bb0a0a2ddccd99022fdc9838718d38dff3ece363_amd64", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:927144e420401c06a9e8fef84c094f4ea65228b4aa73b5cf70c803d93d7333f7_s390x", "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:b4f4b7f29738f921405467dec37ea3b71ccd2fa498b09d867d84a128d2e72a1a_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:145723c1e67b33db17bf56cee7ca73f6eb8cef8b55932bf33c20bc28355e8ee3_ppc64le", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:602fedcf55d75524bc153da83b8e7fdf9b1752e46478671daf01f3322da58167_amd64", "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fb404854ff90ae952a1a0d59c3ce57f64e35582c2b7daebabae079e957630b33_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1f033a94d80b5460657f4bcf0199f67cfb89f724fc1b67ccfd734473fab9da57_s390x", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3b70a0d7703275e57299571dad249feda5d6f7865ca7097902e3a8bc6423b3e2_ppc64le", "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9f00d142683e9d6fd9eda3bdbea813bff7fbd80655846f5d41a450fc3fb33235_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:263703682dc121960b5d562a2058a5ba6b48cc19d374991a8419f1f57d138530_s390x", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:91ae36000c4cdeeab24b5b1a7157a227bc5d211691d1ab50c25c9bf605382075_amd64", "8Base-Quay-3:quay/quay-builder-rhel8@sha256:929ebd4e2ed5767f53a75528046e5f000e981ec98a492caeb39e320be01d230c_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:42923dbbc8761218162c4bff7251d7c6a114e0e6165720512b13c517c8a41bfd_amd64", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:9f1860adef4266b39cbf0aee60b83e3c8ea16563e7f3f54564d56bbf1bfbb3ce_s390x", "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:ef020e1113afd7cb59d2ea09e06c5036528d48d83f37c5eed6c13860293ca216_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9447203b0ac8b0603baec9155d3a48aff97bbe6f422b9bb291d26abff20c0d61_ppc64le", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dc50665efb5a48f4004ff76845c0176efa3ef0fb6110effe7bf177f816fa9770_amd64", "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dfb605bc5cf72ab6614da3288456790b25342cefd6c6d5f7d5a1bde586f38127_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:10c713ece6bbe6c3b0f96be7620aa60f8a77f5274f3d5a81c5281e184a7e2f01_s390x", "8Base-Quay-3:quay/quay-operator-bundle@sha256:2cc0b99e370e881c3c2e32f6cd847e8a70b8ab3773bac458e1bf129a20e2b634_amd64", "8Base-Quay-3:quay/quay-operator-bundle@sha256:43a7fd08c7a557a008a5de1eb75b20995854a83a110c48b2ec1532e001591250_ppc64le", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:4889351fe85a3a53beb8056df565aa8e17b6b517a2cb25590cfda2427810b8e0_s390x", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:a6ce403db768e6399984153d403f3c2babc87d5f97e700e090873b66a745277e_amd64", "8Base-Quay-3:quay/quay-operator-rhel8@sha256:c848605c7e4d6d23256cded3d94c80d209873ad9598585f16a592899e55addcd_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:92f4d5fe043abee0b0200fbec58d92f82f437292e984d0b6e658b1469b92242f_ppc64le", "8Base-Quay-3:quay/quay-rhel8@sha256:a650465c39aa07634a2b3994f7dbbe2bd9899c2e0d48ce68eaf13c042f4370f6_amd64", "8Base-Quay-3:quay/quay-rhel8@sha256:b217938b7818d25626af6e2d2ecacee3892342659bafd23b0bae32f31bf681fc_s390x" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jinja2: Jinja has a sandbox breakout through indirect reference to format method" } ] }