{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2019-09-25T00:00:00", "descriptions": [{"lang": "en", "value": "Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-03-13T20:06:30", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/golang/go/issues/34540"}, {"tags": ["x_refsource_MISC"], "url": "https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ"}, {"name": "FEDORA-2019-1b8cbd39ff", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/"}, {"name": "FEDORA-2019-416d20f960", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/"}, {"name": "FEDORA-2019-e99c1603c3", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/"}, {"name": "openSUSE-SU-2019:2522", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html"}, {"name": "openSUSE-SU-2019:2521", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20191122-0004/"}, {"name": "RHSA-2020:0101", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2020:0101"}, {"name": "RHSA-2020:0329", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2020:0329"}, {"name": "RHSA-2020:0652", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2020:0652"}, {"name": "[debian-lts-announce] 20210313 [SECURITY] [DLA 2591-1] golang-1.7 security update", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html"}, {"name": "[debian-lts-announce] 20210313 [SECURITY] [DLA 2592-1] golang-1.8 security update", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-16276", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/golang/go/issues/34540", "refsource": "CONFIRM", "url": "https://github.com/golang/go/issues/34540"}, {"name": "https://groups.google.com/forum/#!msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ", "refsource": "MISC", "url": "https://groups.google.com/forum/#!msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ"}, {"name": "FEDORA-2019-1b8cbd39ff", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/"}, {"name": "FEDORA-2019-416d20f960", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/"}, {"name": "FEDORA-2019-e99c1603c3", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/"}, {"name": "openSUSE-SU-2019:2522", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html"}, {"name": "openSUSE-SU-2019:2521", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html"}, {"name": "https://security.netapp.com/advisory/ntap-20191122-0004/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20191122-0004/"}, {"name": "RHSA-2020:0101", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2020:0101"}, {"name": "RHSA-2020:0329", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2020:0329"}, {"name": "RHSA-2020:0652", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2020:0652"}, {"name": "[debian-lts-announce] 20210313 [SECURITY] [DLA 2591-1] golang-1.7 security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html"}, {"name": "[debian-lts-announce] 20210313 [SECURITY] [DLA 2592-1] golang-1.8 security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T01:10:41.714Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/golang/go/issues/34540"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ"}, {"name": "FEDORA-2019-1b8cbd39ff", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/"}, {"name": "FEDORA-2019-416d20f960", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/"}, {"name": "FEDORA-2019-e99c1603c3", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/"}, {"name": "openSUSE-SU-2019:2522", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html"}, {"name": "openSUSE-SU-2019:2521", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20191122-0004/"}, {"name": "RHSA-2020:0101", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2020:0101"}, {"name": "RHSA-2020:0329", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2020:0329"}, {"name": "RHSA-2020:0652", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2020:0652"}, {"name": "[debian-lts-announce] 20210313 [SECURITY] [DLA 2591-1] golang-1.7 security update", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html"}, {"name": "[debian-lts-announce] 20210313 [SECURITY] [DLA 2592-1] golang-1.8 security update", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-16276", "datePublished": "2019-09-30T18:40:12", "dateReserved": "2019-09-12T00:00:00", "dateUpdated": "2024-08-05T01:10:41.714Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "780FC85E-2CAD-4605-8DA2-CE16EB2034A5", "versionEndExcluding": "1.12.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "3FDA5CF5-27C2-4DA5-852D-1A69271DB7EE", "versionEndExcluding": "1.13.1", "versionStartIncluding": "1.13", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "matchCriteriaId": "D100F7CE-FC64-4CC6-852A-6136D72DA419", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "matchCriteriaId": "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", "matchCriteriaId": "80F0FA5D-8D3B-4C0E-81E2-87998286AF33", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "4C85A84D-A70F-4B02-9E5D-CD9660ABF048", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:developer_tools:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "60937D60-6B78-400F-8D30-7FCF328659A1", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "92BC9265-6959-4D37-BE5E-8C45E98992F8", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:cloud_insights_telegraf_agent:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DAE7369-EEC5-405E-9D13-858335FDA647", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling."}, {"lang": "es", "value": "Go versiones anteriores a 1.12.10 y versiones 1.13.x anteriores a 1.13.1, permitir el Trafico No Autorizado de Peticiones HTTP."}], "id": "CVE-2019-16276", "lastModified": "2023-11-07T03:05:39.850", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-30T19:15:08.790", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/errata/RHSA-2020:0101"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/errata/RHSA-2020:0329"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/errata/RHSA-2020:0652"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/golang/go/issues/34540"}, {"source": "cve@mitre.org", "url": "https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20191122-0004/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-444"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2020:0101", "cpe": "cpe:/a:redhat:devtools:2019", "package": "go-toolset-1.12-0:1.12.12-4.el7", "product_name": "Red Hat Developer Tools", "release_date": "2020-01-14T00:00:00Z"}, {"advisory": "RHSA-2020:0101", "cpe": "cpe:/a:redhat:devtools:2019", "package": "go-toolset-1.12-golang-0:1.12.12-4.el7", "product_name": "Red Hat Developer Tools", "release_date": "2020-01-14T00:00:00Z"}, {"advisory": "RHSA-2020:0329", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "go-toolset:rhel8-8010020191220185136.0ed30617", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2020-02-04T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-baremetal-runtimecfg-rhel7:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cli:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cli-artifacts:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-authentication-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-dns-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-image-registry-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-ingress-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-kube-apiserver-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-kube-controller-manager-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-kube-scheduler-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-openshift-apiserver-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-openshift-controller-manager-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-svcat-apiserver-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-cluster-svcat-controller-manager-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-console-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-coredns:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-gcp-machine-controllers-rhel7:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-hyperkube:v4.2.4-201911071146", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-insights-rhel7-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-kube-proxy:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-mdns-publisher-rhel7:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-node:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-oauth-proxy:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-openshift-apiserver-rhel7:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-openshift-controller-manager-rhel7:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-operator-lifecycle-manager:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-operator-registry:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-prometheus-alertmanager:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-prometheus-node-exporter:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-prometheus-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-sdn-controller-rhel7:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-service-ca-operator:v4.2.4-201911050122", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3303", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-tests:v4.2.4-201911072324", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3304", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "atomic-enterprise-service-catalog-1:4.2.4-201911041319.git.1.1de4bcd.el7", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3304", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "atomic-openshift-service-idler-0:4.2.4-201911041319.git.1.4131c2f.el7", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3304", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift-0:4.2.4-201911041319.git.0.c7d2111.el8", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3304", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift-clients-0:4.2.4-201911010432.git.1.30c33a5.el8", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHBA-2019:3304", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift-enterprise-autoheal-0:4.2.4-201911010432.git.1.0b5cd44.el7", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2019-11-13T00:00:00Z"}, {"advisory": "RHSA-2020:0652", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-installer:v4.2.21-202002240343", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2020-03-05T00:00:00Z"}, {"advisory": "RHSA-2020:0652", "cpe": "cpe:/a:redhat:openshift:4.2::el7", "package": "openshift4/ose-installer-artifacts:v4.2.21-202002240343", "product_name": "Red Hat OpenShift Container Platform 4.2", "release_date": "2020-03-05T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-aws-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-azure-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-baremetal-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cloud-credential-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-autoscaler:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-autoscaler-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-bootstrap:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-config-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-machine-approver:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-monitoring-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-network-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-node-tuning-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-samples-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-cluster-storage-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-configmap-reloader:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-console:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-docker-builder:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-docker-registry:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-etcd:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-grafana:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-k8s-prometheus-adapter:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-kube-rbac-proxy:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-kube-state-metrics:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-kuryr-cni-rhel8:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-libvirt-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-local-storage-static-provisioner:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-machine-api-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-machine-config-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-multus-admission-controller:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-multus-cni:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-must-gather:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-openstack-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-operator-marketplace:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-ovn-kubernetes:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-pod:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-prometheus-config-reloader:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-prom-label-proxy:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el7", "package": "openshift4/ose-telemeter:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-aws-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-azure-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-baremetal-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cloud-credential-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-autoscaler:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-autoscaler-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-bootstrap:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-config-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-machine-approver:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-monitoring-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-network-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-node-tuning-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-samples-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-cluster-storage-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-configmap-reloader:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-console:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-docker-builder:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-docker-registry:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-etcd:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-grafana:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-k8s-prometheus-adapter:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-kube-rbac-proxy:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-kube-state-metrics:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-kuryr-cni-rhel8:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-libvirt-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-local-storage-static-provisioner:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-machine-api-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-machine-config-operator:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-multus-admission-controller:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-multus-cni:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-must-gather:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-openstack-machine-controllers:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-operator-marketplace:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-ovn-kubernetes:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-pod:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-prometheus-config-reloader:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-prom-label-proxy:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}, {"advisory": "RHBA-2020:0062", "cpe": "cpe:/a:redhat:openshift:4.3::el8", "package": "openshift4/ose-telemeter:v4.3.0-202001211731", "product_name": "Red Hat OpenShift Container Platform 4.3", "release_date": "2020-01-23T00:00:00Z"}], "bugzilla": {"description": "golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling", "id": "1755969", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1755969"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "status": "verified"}, "cwe": "CWE-444", "details": ["Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.", "It was discovered that net/http (through net/textproto) in golang does not correctly interpret HTTP requests where an HTTP header contains spaces before the colon. This could be abused by an attacker to smuggle HTTP requests when a proxy or a firewall is placed behind a server implemented in Go or to filter bypasses depending on the specific network configuration."], "name": "CVE-2019-16276", "package_state": [{"cpe": "cpe:/a:redhat:ceph_storage:2", "fix_state": "Affected", "package_name": "golang", "product_name": "Red Hat Ceph Storage 2"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Affected", "package_name": "golang", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "gcc", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "golang", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:openshift:3.10", "fix_state": "Out of support scope", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.10"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "ansible-service-broker", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "apb", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-enterprise-service-catalog", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-cluster-autoscaler", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-descheduler", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-dockerregistry", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-metrics-server", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-node-problem-detector", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-service-idler", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "atomic-openshift-web-console", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "containernetworking-plugins", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "cri-o", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "cri-tools", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "csi-attacher", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "csi-driver-registrar", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "csi-livenessprobe", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "csi-provisioner", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "golang-github-openshift-oauth-proxy", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "golang-github-openshift-prometheus-alert-buffer", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "golang-github-prometheus-alertmanager", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "golang-github-prometheus-node_exporter", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "golang-github-prometheus-prometheus", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "golang-github-prometheus-promu", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "hawkular-openshift-agent", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "heapster", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "image-inspector", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-enterprise-autoheal", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-enterprise-cluster-capacity", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-enterprise-image-registry", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-eventrouter", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-external-storage", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-monitor-project-lifecycle", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openshift-monitor-sample-app", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "openvswitch-ovn-kubernetes", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Will not fix", "package_name": "podman", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:3.9", "fix_state": "Out of support scope", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "ansible-operator", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "ansible-service-broker", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "apb", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "containernetworking-plugins", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "cri-o", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "cri-tools", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "golang-github-openshift-prometheus-alert-buffer", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "golang-github-prometheus-promu", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "ignition", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "machine-config-daemon", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "openshift-eventrouter", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "openshift-external-storage", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "ose-installer-artifacts", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "podman", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "skopeo", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "golang", "product_name": "Red Hat Storage 3"}], "public_date": "2019-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2019-16276\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-16276\nhttps://groups.google.com/forum/#!msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ"], "statement": "* This issue affects the versions of golang as shipped with Red Hat Enterprise Linux 7, however it was deprecated in Red Hat Enterprise Linux 7.6 and it does not receive updates anymore. Developers are encouraged to use the Go Toolset instead, which is available through the Red Hat Developer program. See https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/chap-red_hat_enterprise_linux-7.6_release_notes-other_deprecated_functionality#idm140555585405248.\n* The version of golang provided in Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3 allows filter bypasses or request smuggling and contains the vulnerable code hence affected by this vulnerability.\n* In OpenShift Container Platform, all packages and container images built with a vulnerable version of Go and use the net/http package are affected by this flaw.", "threat_severity": "Moderate", "upstream_fix": "Go 1.13.1, Go 1.12.10"}