{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-08-04T15:09:33.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://golang.org/pkg/net/#ParseCIDR"}, {"tags": ["x_refsource_MISC"], "url": "https://www.oracle.com/security-alerts/cpujan2022.html"}, {"tags": ["x_refsource_MISC"], "url": "https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/golang/go/issues/43389"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/golang/go/issues/30999"}, {"tags": ["x_refsource_MISC"], "url": "https://go-review.googlesource.com/c/go/+/325829/"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md"}, {"name": "FEDORA-2022-17d004ed71", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/"}, {"name": "GLSA-202208-02", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/202208-02"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-29923", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://golang.org/pkg/net/#ParseCIDR", "refsource": "MISC", "url": "https://golang.org/pkg/net/#ParseCIDR"}, {"name": "https://www.oracle.com/security-alerts/cpujan2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujan2022.html"}, {"name": "https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis", "refsource": "MISC", "url": "https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis"}, {"name": "https://github.com/golang/go/issues/43389", "refsource": "MISC", "url": "https://github.com/golang/go/issues/43389"}, {"name": "https://github.com/golang/go/issues/30999", "refsource": "MISC", "url": "https://github.com/golang/go/issues/30999"}, {"name": "https://go-review.googlesource.com/c/go/+/325829/", "refsource": "MISC", "url": "https://go-review.googlesource.com/c/go/+/325829/"}, {"name": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md", "refsource": "MISC", "url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md"}, {"name": "FEDORA-2022-17d004ed71", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/"}, {"name": "GLSA-202208-02", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/202208-02"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T22:18:03.455Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://golang.org/pkg/net/#ParseCIDR"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.oracle.com/security-alerts/cpujan2022.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/golang/go/issues/43389"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/golang/go/issues/30999"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://go-review.googlesource.com/c/go/+/325829/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md"}, {"name": "FEDORA-2022-17d004ed71", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/"}, {"name": "GLSA-202208-02", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/202208-02"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2021-29923", "datePublished": "2021-08-07T16:38:59.000Z", "dateReserved": "2021-04-01T00:00:00.000Z", "dateUpdated": "2024-08-03T22:18:03.455Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "D39D5C21-8281-429F-AC33-CE39821CA3EC", "versionEndExcluding": "1.17", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*", "matchCriteriaId": "20290BBC-E3C9-4B96-94FE-2DFADD4BF1F1", "versionEndExcluding": "21.1.1.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR."}, {"lang": "es", "value": "Go versiones anteriores a 1.17, no considera apropiadamente los caracteres cero extra\u00f1os al principio de un octeto de direcci\u00f3n IP, lo que (en algunas situaciones) permite a atacantes omitir el control de acceso que es basado en las direcciones IP, debido a una interpretaci\u00f3n octal inesperada. Esto afecta a net.ParseIP y net.ParseCIDR"}], "id": "CVE-2021-29923", "lastModified": "2024-11-21T06:01:59.570", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-08-07T17:15:07.067", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/golang/go/issues/30999"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/golang/go/issues/43389"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://go-review.googlesource.com/c/go/+/325829/"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://golang.org/pkg/net/#ParseCIDR"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/202208-02"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://www.oracle.com/security-alerts/cpujan2022.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/golang/go/issues/30999"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/golang/go/issues/43389"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://go-review.googlesource.com/c/go/+/325829/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://golang.org/pkg/net/#ParseCIDR"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/202208-02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://www.oracle.com/security-alerts/cpujan2022.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/client-kn-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-controller-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-mtbroker-filter-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-mtchannel-broker-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-mtping-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-storage-version-migration-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-sugar-controller-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/eventing-webhook-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/ingress-rhel8-operator:1.20.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/knative-rhel8-operator:1.20.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/kn-cli-artifacts-rhel8:0.26.0-2", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/kourier-control-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/net-istio-controller-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/net-istio-webhook-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serverless-operator-bundle:1.20.0-3", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serverless-rhel8-operator:1.20.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-activator-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-autoscaler-hpa-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-autoscaler-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-controller-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-domain-mapping-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-domain-mapping-webhook-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-queue-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-storage-version-migration-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/serving-webhook-rhel8:0.26.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1/svls-must-gather-rhel8:1.20.0-1", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8:0.26.0-2", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8:0.26.0-2", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8:0.26.0-2", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0434", "cpe": "cpe:/a:redhat:serverless:1.20::el8", "package": "openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8:0.26.0-2", "product_name": "Openshift Serveless 1.20", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:0432", "cpe": "cpe:/a:redhat:serverless:1.0::el8", "package": "openshift-serverless-clients-0:0.26.0-2.el8", "product_name": "Openshift Serverless 1 on RHEL 8", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2022:1276", "cpe": "cpe:/a:redhat:service_mesh:2.0::el8", "package": "kiali-0:v1.24.7.redhat1-1.el8", "product_name": "OpenShift Service Mesh 2.0", "release_date": "2022-04-07T00:00:00Z"}, {"advisory": "RHSA-2022:1276", "cpe": "cpe:/a:redhat:service_mesh:2.0::el8", "package": "servicemesh-0:2.0.9-3.el8", "product_name": "OpenShift Service Mesh 2.0", "release_date": "2022-04-07T00:00:00Z"}, {"advisory": "RHSA-2022:1276", "cpe": "cpe:/a:redhat:service_mesh:2.0::el8", "package": "servicemesh-prometheus-0:2.14.0-16.el8.1", "product_name": "OpenShift Service Mesh 2.0", "release_date": "2022-04-07T00:00:00Z"}, {"advisory": "RHSA-2022:1276", "cpe": "cpe:/a:redhat:service_mesh:2.0::el8", "package": "servicemesh-proxy-0:2.0.9-3.el8", "product_name": "OpenShift Service Mesh 2.0", "release_date": "2022-04-07T00:00:00Z"}, {"advisory": "RHSA-2021:3431", "cpe": "cpe:/a:redhat:devtools:2021", "package": "go-toolset-1.15-golang-0:1.15.14-2.el7_9", "product_name": "Red Hat Developer Tools", "release_date": "2021-09-07T00:00:00Z"}, {"advisory": "RHSA-2021:3585", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "go-toolset:rhel8-8040020210909125047.5081a262", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2021-09-21T00:00:00Z"}, {"advisory": "RHSA-2022:0577", "cpe": "cpe:/a:redhat:openshift:4.10::el8", "impact": "low", "package": "openshift4-wincw/windows-machine-config-operator-bundle:v5.0.0-5", "product_name": "Red Hat OpenShift Container Platform 4.10", "release_date": "2022-03-28T00:00:00Z"}, {"advisory": "RHSA-2022:0577", "cpe": "cpe:/a:redhat:openshift:4.10::el8", "impact": "low", "package": "openshift4-wincw/windows-machine-config-rhel8-operator:5.0.0-5", "product_name": "Red Hat OpenShift Container Platform 4.10", "release_date": "2022-03-28T00:00:00Z"}, {"advisory": "RHSA-2022:0557", "cpe": "cpe:/a:redhat:openshift:4.9::el7", "impact": "low", "package": "butane-0:0.13.1-2.rhaos4.9.el8", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0557", "cpe": "cpe:/a:redhat:openshift:4.9::el7", "impact": "low", "package": "cri-o-0:1.22.1-17.rhaos4.9.git3029b1d.2.el8", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0557", "cpe": "cpe:/a:redhat:openshift:4.9::el7", "impact": "low", "package": "cri-tools-0:1.22.0-2.el8", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0557", "cpe": "cpe:/a:redhat:openshift:4.9::el7", "impact": "low", "package": "golang-github-prometheus-promu-0:0.5.0-5.git642a960.el8", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0557", "cpe": "cpe:/a:redhat:openshift:4.9::el7", "impact": "low", "package": "ignition-0:2.12.0-3.rhaos4.9.el8", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/egress-router-cni-alt-rhel8:v4.9.0-202202120107.p0.g099b756.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/egress-router-cni-rhel8:v4.9.0-202202120107.p0.g099b756.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/network-tools-rhel8:v4.9.0-202202140924.p0.ged0b846.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-aws-cloud-controller-manager-rhel8:v4.9.0-202202120107.p0.g18d82a6.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-aws-ebs-csi-driver-rhel8:v4.9.0-202202120107.p0.g26f1b6f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-aws-ebs-csi-driver-rhel8-operator:v4.9.0-202202120107.p0.ge8e2cb3.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-aws-machine-controllers:v4.9.0-202202120107.p0.g8226e86.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-aws-pod-identity-webhook-rhel8:v4.9.0-202202120107.p0.g37a1328.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-azure-cloud-controller-manager-rhel8:v4.9.0-202202120107.p0.gc02678d.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-azure-cloud-node-manager-rhel8:v4.9.0-202202120107.p0.gc02678d.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-azure-disk-csi-driver-rhel8:v4.9.0-202202120107.p0.gade7373.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-azure-disk-csi-driver-rhel8-operator:v4.9.0-202202120107.p0.g15e474c.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-azure-machine-controllers:v4.9.0-202202120107.p0.g3bf2b7f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-baremetal-installer-rhel8:v4.9.0-202202120107.p0.ge9a66d5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-baremetal-machine-controllers:v4.9.0-202202120107.p0.g1c81cab.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-baremetal-rhel8-operator:v4.9.0-202202120107.p0.g6e62a54.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-baremetal-runtimecfg-rhel8:v4.9.0-202202152352.p0.g5113d1b.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cli:v4.9.0-202202140924.p0.g340e212.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cli-alt-rhel8:v4.9.0-202202140924.p0.g340e212.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cli-artifacts:v4.9.0-202202140924.p0.g340e212.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cli-artifacts-alt-rhel8:v4.9.0-202202140924.p0.g340e212.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cloud-credential-operator:v4.9.0-202202120107.p0.gd642d11.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-authentication-operator:v4.9.0-202202120107.p0.g1d05f80.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-autoscaler:v4.9.0-202202120107.p0.g68fe93a.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-autoscaler-operator:v4.9.0-202202120107.p0.gbc20153.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-baremetal-operator-rhel8:v4.9.0-202202120107.p0.g10af6a9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-bootstrap:v4.9.0-202202120107.p0.g7e074a7.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-cloud-controller-manager-operator-rhel8:v4.9.0-202202120107.p0.g1826b16.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-config-operator:v4.9.0-202202120107.p0.g184a513.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator:v4.9.0-202202120107.p0.gc750d4b.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-dns-operator:v4.9.0-202202120107.p0.geedd0dc.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-etcd-rhel8-operator:v4.9.0-202202120107.p0.g19c4e72.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-image-registry-operator:v4.9.0-202202120107.p0.gd886c13.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-ingress-operator:v4.9.0-202202120107.p0.g07c25a6.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-kube-apiserver-operator:v4.9.0-202202120107.p0.ga895470.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-kube-controller-manager-operator:v4.9.0-202202120107.p0.g78b8e48.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-kube-scheduler-operator:v4.9.0-202202120107.p0.g5694bdd.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator:v4.9.0-202202120107.p0.g7245b0f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-machine-approver:v4.9.0-202202120107.p0.g993ec9f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-monitoring-operator:v4.9.0-202202120107.p0.gae7b0a3.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-network-operator:v4.9.0-202202152352.p0.g4d93655.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-node-tuning-operator:v4.9.0-202202120107.p0.gce0b3ae.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-openshift-apiserver-operator:v4.9.0-202202120107.p0.gd293c31.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-openshift-controller-manager-operator:v4.9.0-202202120107.p0.g3015cb8.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-policy-controller-rhel8:v4.9.0-202202120107.p0.g8fbffaf.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-samples-operator:v4.9.0-202202120107.p0.g9b0a9d7.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-storage-operator:v4.9.0-202202120107.p0.g2e76e02.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-cluster-version-operator:v4.9.0-202202120107.p0.gf2551e5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-configmap-reloader:v4.9.0-202202120107.p0.gb84b5bf.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-console:v4.9.0-202202151621.p0.gc60ddb0.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-console-operator:v4.9.0-202202120107.p0.gfdcb82f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-container-networking-plugins-alt-rhel8:v4.9.0-202202120107.p0.g44a4913.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-container-networking-plugins-rhel8:v4.9.0-202202120107.p0.g44a4913.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-coredns:v4.9.0-202202120107.p0.g3cb11c0.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-driver-manila-rhel8:v4.9.0-202202120107.p0.gddbc0e4.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-driver-manila-rhel8-operator:v4.9.0-202202120107.p0.gfd2d838.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-driver-nfs-rhel8:v4.9.0-202202120107.p0.g0e0c173.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-attacher:v4.9.0-202202120107.p0.g0a1737c.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-attacher-rhel8:v4.9.0-202202120107.p0.g0a1737c.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-provisioner:v4.9.0-202202120107.p0.g7736e72.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-provisioner-rhel8:v4.9.0-202202120107.p0.g7736e72.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-resizer:v4.9.0-202202120107.p0.gdad46d0.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-resizer-rhel8:v4.9.0-202202120107.p0.gdad46d0.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-snapshotter:v4.9.0-202202120107.p0.g52ab893.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-external-snapshotter-rhel8:v4.9.0-202202120107.p0.g52ab893.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-livenessprobe:v4.9.0-202202120107.p0.gc13c3a5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-livenessprobe-rhel8:v4.9.0-202202120107.p0.gc13c3a5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-node-driver-registrar:v4.9.0-202202120107.p0.g3e02b07.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-node-driver-registrar-rhel8:v4.9.0-202202120107.p0.g3e02b07.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-snapshot-controller:v4.9.0-202202120107.p0.g52ab893.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-snapshot-controller-rhel8:v4.9.0-202202120107.p0.g52ab893.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-csi-snapshot-validation-webhook-rhel8:v4.9.0-202202120107.p0.g52ab893.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-docker-builder:v4.9.0-202202120107.p0.g7e2e890.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-docker-registry:v4.9.0-202202131427.p0.gab2eaa5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-etcd:v4.9.0-202202120107.p0.gf99cada.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-gcp-machine-controllers-rhel8:v4.9.0-202202120107.p0.gd92b088.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-gcp-pd-csi-driver-operator-rhel8:v4.9.0-202202120107.p0.gd8a891d.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-gcp-pd-csi-driver-rhel8:v4.9.0-202202120107.p0.g48d49f7.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-grafana:v4.9.0-202202120107.p0.g6130ba8.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-hyperkube:v4.9.0-202202120107.p0.gb93fd35.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-insights-rhel8-operator:v4.9.0-202202120107.p0.g3f1401a.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-installer:v4.9.0-202202120107.p0.ge9a66d5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-installer-artifacts:v4.9.0-202202120417.p0.ge9a66d5.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-ironic-machine-os-downloader-rhel8:v4.9.0-202202120107.p0.g90b5722.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-jenkins:v4.9.0-202202140924.p0.gaf84740.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-jenkins-agent-base:v4.9.0-202202140924.p0.gaf84740.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-k8s-prometheus-adapter:v4.9.0-202202120107.p0.gadfdd41.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-kube-proxy:v4.9.0-202202120107.p0.gecd60f9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-kube-rbac-proxy:v4.9.0-202202120107.p0.g58e0929.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-kube-state-metrics:v4.9.0-202202120107.p0.g6e41dbd.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-kube-storage-version-migrator-rhel8:v4.9.0-202202120107.p0.g901a6d2.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-kuryr-cni-rhel8:v4.9.0-202202120107.p0.g1e8c94f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-libvirt-machine-controllers:v4.9.0-202202120107.p0.g59ae2ed.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-machine-api-operator:v4.9.0-202202120107.p0.g383c9b9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-machine-config-operator:v4.9.0-202202150825.p0.gd84a7f9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-mdns-publisher-rhel8:v4.9.0-202202120107.p0.g266597b.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-admission-controller:v4.9.0-202202120107.p0.g3c28a57.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-cni:v4.9.0-202202120107.p0.gc249937.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-cni-alt-rhel8:v4.9.0-202202120107.p0.gc249937.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-networkpolicy-rhel8:v4.9.0-202202120107.p0.gfd12fed.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-route-override-cni-alt-rhel8:v4.9.0-202202120107.p0.g707dd38.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-route-override-cni-rhel8:v4.9.0-202202120107.p0.g707dd38.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-whereabouts-ipam-cni-alt-rhel8:v4.9.0-202202120107.p0.g43552df.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-multus-whereabouts-ipam-cni-rhel8:v4.9.0-202202120107.p0.g43552df.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-must-gather:v4.9.0-202202141138.p0.gb181f1f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-network-metrics-daemon-rhel8:v4.9.0-202202120107.p0.g9fd6103.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-oauth-apiserver-rhel8:v4.9.0-202202120107.p0.g8b203f9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-oauth-proxy:v4.9.0-202202120107.p0.g9ea1ebc.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-oauth-server-rhel8:v4.9.0-202202120107.p0.g1ee9925.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openshift-apiserver-rhel8:v4.9.0-202202161322.p0.gfe6dc77.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openshift-controller-manager-rhel8:v4.9.0-202202120107.p0.g79857a3.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openshift-state-metrics-rhel8:v4.9.0-202202120107.p0.g689af8b.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openstack-cinder-csi-driver-rhel8:v4.9.0-202202120107.p0.gddbc0e4.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.9.0-202202120107.p0.g56efc78.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openstack-cloud-controller-manager-rhel8:v4.9.0-202202120107.p0.gddbc0e4.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-openstack-machine-controllers:v4.9.0-202202120107.p0.ga7442bb.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-operator-lifecycle-manager:v4.9.0-202202120107.p0.g3cd421d.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-operator-marketplace:v4.9.0-202202120107.p0.g8594727.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-operator-registry:v4.9.0-202202120107.p0.g3cd421d.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-ovirt-machine-controllers-rhel8:v4.9.0-202202120107.p0.g15a6add.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-ovn-kubernetes:v4.9.0-202202140924.p0.gce028c9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-pod:v4.9.0-202202120107.p0.gb93fd35.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-prometheus:v4.9.0-202202120107.p0.g3197fa7.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-prometheus-alertmanager:v4.9.0-202202120107.p0.g579e3c6.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-prometheus-config-reloader:v4.9.0-202202120107.p0.g0869335.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-prometheus-node-exporter:v4.9.0-202202120107.p0.g1ab97f3.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-prometheus-operator:v4.9.0-202202120107.p0.g0869335.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-prom-label-proxy:v4.9.0-202202120107.p0.g9f870bf.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-sdn-rhel8:v4.9.0-202202120107.p0.gecd60f9.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-service-ca-operator:v4.9.0-202202120107.p0.gab44f58.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-telemeter:v4.9.0-202202120107.p0.g03842e0.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-tests:v4.9.0-202202140924.p0.g932d502.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-thanos-rhel8:v4.9.0-202202120107.p0.ge0fa82c.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8:v4.9.0-202202120107.p0.g9f56afd.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-vmware-vsphere-csi-driver-rhel8:v4.9.0-202202120107.p0.g4ece3d1.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-vsphere-csi-driver-operator-rhel8:v4.9.0-202202120107.p0.g9f56afd.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-vsphere-csi-driver-rhel8:v4.9.0-202202120107.p0.g4ece3d1.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.9.0-202202120107.p0.g4ece3d1.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ose-vsphere-problem-detector-rhel8:v4.9.0-202202120107.p0.gde8606f.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ovirt-csi-driver-rhel8:v4.9.0-202202120107.p0.gfe2a7fd.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:0561", "cpe": "cpe:/a:redhat:openshift:4.9::el8", "impact": "low", "package": "openshift4/ovirt-csi-driver-rhel8-operator:v4.9.0-202202120107.p0.g9302429.assembly.stream", "product_name": "Red Hat OpenShift Container Platform 4.9", "release_date": "2022-02-23T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/cephcsi-rhel8:v4.10.0-35", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/mcg-core-rhel8:v4.10.0-12", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/mcg-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/mcg-rhel8-operator:v4.10.0-14", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/ocs-must-gather-rhel8:v4.10.0-56", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/ocs-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/ocs-rhel8-operator:v4.10.0-58", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-console-rhel8:v4.10.0-27", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-csi-addons-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-csi-addons-rhel8-operator:v4.10.0-14", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-csi-addons-sidecar-rhel8:v4.10.0-15", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-lvm-must-gather-rhel8:v4.10.0-13", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-lvm-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-lvm-rhel8-operator:v4.10.0-32", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-multicluster-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-multicluster-rhel8-operator:v4.10.0-32", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-rhel8-operator:v4.10.0-27", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odf-topolvm-rhel8:v4.10.0-16", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odr-cluster-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odr-hub-operator-bundle:v4.10.0-221", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/odr-rhel8-operator:v4.10.0-26", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/rook-ceph-rhel8-operator:v4.10.0-54", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:1372", "cpe": "cpe:/a:redhat:openshift_data_foundation:4.10::el8", "package": "odf4/volume-replication-rhel8-operator:v4.10.0-11", "product_name": "Red Hat OpenShift Data Foundation 4.10 on RHEL8", "release_date": "2022-04-13T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-agent-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-all-in-one-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-collector-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-es-index-cleaner-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-es-rollover-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-ingester-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-operator-bundle-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-operator-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "jaeger-query-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "opentelemetry-collector-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "opentelemetry-operator-bundle-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2022:0318", "cpe": "cpe:/a:redhat:openshift_distributed_tracing:2.1::el8", "package": "opentelemetry-operator-container", "product_name": "Red Hat OpenShift distributed tracing 2", "release_date": "2022-01-27T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "kubernetes-nmstate-handler-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "kubevirt-v2v-conversion-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "kubevirt-vmware-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "node-maintenance-operator-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "vm-import-controller-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "vm-import-operator-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4914", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "vm-import-virtv2v-container", "product_name": "Red Hat OpenShift Virtualization 4", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2022:0260", "cpe": "cpe:/a:redhat:openstack:16.1::el8", "package": "etcd-0:3.3.23-7.el8ost", "product_name": "Red Hat OpenStack Platform 16.1", "release_date": "2022-01-25T00:00:00Z"}, {"advisory": "RHSA-2022:0988", "cpe": "cpe:/a:redhat:openstack:16.1::el8", "package": "golang-github-vbatts-tar-split-0:0.11.1-6.el8ost", "product_name": "Red Hat OpenStack Platform 16.1", "release_date": "2022-03-24T00:00:00Z"}, {"advisory": "RHSA-2022:0989", "cpe": "cpe:/a:redhat:openstack:16.1::el8", "package": "golang-qpid-apache-0:0.32.0-rc1.9.el8ost", "product_name": "Red Hat OpenStack Platform 16.1", "release_date": "2022-03-24T00:00:00Z"}, {"advisory": "RHSA-2022:0237", "cpe": "cpe:/a:redhat:openstack:16.2::el8", "package": "etcd-0:3.3.23-7.el8ost", "product_name": "Red Hat OpenStack Platform 16.2", "release_date": "2022-01-24T00:00:00Z"}, {"advisory": "RHSA-2022:0997", "cpe": "cpe:/a:redhat:openstack:16.2::el8", "package": "golang-qpid-apache-0:0.32.0-rc1.9.el8ost", "product_name": "Red Hat OpenStack Platform 16.2", "release_date": "2022-03-23T00:00:00Z"}, {"advisory": "RHSA-2022:0998", "cpe": "cpe:/a:redhat:openstack:16.2::el8", "package": "golang-github-vbatts-tar-split-0:0.11.1-6.el8ost", "product_name": "Red Hat OpenStack Platform 16.2", "release_date": "2022-03-23T00:00:00Z"}, {"advisory": "RHSA-2021:4902", "cpe": "cpe:/a:redhat:advanced_cluster_security:3.67::el8", "package": "advanced-cluster-security/rhacs-rhel8-operator:3.67.0-3", "product_name": "RHACS-3.67-RHEL-8", "release_date": "2021-12-01T00:00:00Z"}, {"advisory": "RHSA-2022:0431", "cpe": "cpe:/a:redhat:advanced_cluster_security:3.68::el8", "package": "advanced-cluster-security/rhacs-scanner-rhel8:3.68.0-6", "product_name": "RHACS-3.68-RHEL-8", "release_date": "2022-02-03T00:00:00Z"}, {"advisory": "RHSA-2021:4722", "cpe": "cpe:/a:redhat:container_native_virtualization:2.6::el7", "package": "kubevirt-0:2.6.8-211.el7", "product_name": "RHEL-7-CNV-2.6", "release_date": "2021-11-17T00:00:00Z"}, {"advisory": "RHSA-2021:4910", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el7", "package": "kubevirt-0:4.8.3-251.el7", "product_name": "RHEL-7-CNV-4.8", "release_date": "2021-12-02T00:00:00Z"}, {"advisory": "RHSA-2021:4722", "cpe": "cpe:/a:redhat:container_native_virtualization:2.6::el8", "package": "kubevirt-0:2.6.8-211.el8", "product_name": "RHEL-8-CNV-2.6", "release_date": "2021-11-17T00:00:00Z"}, {"advisory": "RHSA-2021:4725", "cpe": "cpe:/a:redhat:container_native_virtualization:2.6::el8", "package": "container-native-virtualization/kubevirt-cpu-node-labeller:v2.6.8-1", "product_name": "RHEL-8-CNV-2.6", "release_date": "2021-11-17T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/cnv-must-gather-rhel8:v4.10.0-110", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/hyperconverged-cluster-operator:v4.10.0-133", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8:v4.10.0-133", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-apiserver:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-cloner:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-controller:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-importer:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-operator:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-uploadproxy:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2022:0947", "cpe": "cpe:/a:redhat:container_native_virtualization:4.10::el8", "package": "container-native-virtualization/virt-cdi-uploadserver:v4.10.0-90", "product_name": "RHEL-8-CNV-4.10", "release_date": "2022-03-16T00:00:00Z"}, {"advisory": "RHSA-2021:4910", "cpe": "cpe:/a:redhat:container_native_virtualization:4.8::el8", "package": "kubevirt-0:4.8.3-251.el8", "product_name": "RHEL-8-CNV-4.8", "release_date": "2021-12-02T00:00:00Z"}], "bugzilla": {"description": "golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet", "id": "1992006", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1992006"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "status": "verified"}, "cwe": "CWE-20", "details": ["Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.", "A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2021-29923", "package_state": [{"cpe": "cpe:/a:redhat:rhmt", "fix_state": "Affected", "impact": "low", "package_name": "rhmtc/openshift-migration-must-gather-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:rhmt", "fix_state": "Affected", "impact": "low", "package_name": "rhmtc/openshift-migration-registry-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:rhmt", "fix_state": "Affected", "impact": "low", "package_name": "rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:rhmt", "fix_state": "Affected", "impact": "low", "package_name": "rhmtc/openshift-migration-velero-restic-restore-helper-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:rhmt", "fix_state": "Affected", "impact": "low", "package_name": "rhmtc/openshift-migration-velero-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:rhmt", "fix_state": "Affected", "impact": "low", "package_name": "rhmtc/openshift-velero-plugin-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:serverless:1", "fix_state": "Affected", "package_name": "CLI", "product_name": "OpenShift Serverless"}, {"cpe": "cpe:/a:redhat:serverless:1", "fix_state": "Affected", "package_name": "knative-eventing", "product_name": "OpenShift Serverless"}, {"cpe": "cpe:/a:redhat:service_mesh:2.0", "fix_state": "Will not fix", "package_name": "servicemesh-grafana", "product_name": "OpenShift Service Mesh 2.0"}, {"cpe": "cpe:/a:redhat:service_mesh:2.0", "fix_state": "Will not fix", "package_name": "servicemesh-operator", "product_name": "OpenShift Service Mesh 2.0"}, {"cpe": "cpe:/a:redhat:advanced_cluster_security:3", "fix_state": "Affected", "package_name": "scanner", "product_name": "Red Hat Advanced Cluster Security 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:2", "fix_state": "Out of support scope", "package_name": "golang", "product_name": "Red Hat Ceph Storage 2"}, {"cpe": "cpe:/a:redhat:ceph_storage:2", "fix_state": "Out of support scope", "package_name": "grafana", "product_name": "Red Hat Ceph Storage 2"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Out of support scope", "package_name": "golang", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Out of support scope", "package_name": "golang-github-prometheus-node_exporter", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Out of support scope", "package_name": "grafana", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:3", "fix_state": "Out of support scope", "package_name": "grafana-container", "product_name": "Red Hat Ceph Storage 3"}, {"cpe": "cpe:/a:redhat:ceph_storage:4", "fix_state": "Affected", "package_name": "rhceph/rhceph-4-dashboard-rhel8", "product_name": "Red Hat Ceph Storage 4"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "buildah", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "golang", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Out of support scope", "package_name": "container-tools:1.0/buildah", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "container-tools:2.0/buildah", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "container-tools:rhel8/buildah", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "buildah", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "golang", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "impact": "low", "package_name": "atomic-openshift", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "impact": "low", "package_name": "containernetworking-plugins", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "impact": "low", "package_name": "kata-containers", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "impact": "low", "package_name": "openshift", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "impact": "low", "package_name": "openshift-clients", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "impact": "low", "package_name": "openshift-golang-builder-container", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "impact": "low", "package_name": "podman", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:assisted_installer:1", "fix_state": "Affected", "package_name": "rhai-tech-preview/assisted-installer-rhel8", "product_name": "Red Hat OpenShift Container Platform Assisted Installer 1"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Affected", "package_name": "mcg", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Affected", "package_name": "ocs4/cephcsi-rhel8", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Affected", "package_name": "ocs4/mcg-rhel8-operator", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Affected", "package_name": "ocs4/ocs-must-gather-rhel8", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Affected", "package_name": "ocs4/ocs-rhel8-operator", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Affected", "package_name": "ocs4/rook-ceph-rhel8-operator", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_distributed_tracing:2", "fix_state": "Not affected", "impact": "low", "package_name": "rhosdt/jaeger-all-in-one-rhel8", "product_name": "Red Hat OpenShift distributed tracing 2"}, {"cpe": "cpe:/a:redhat:openshift_sandboxed_containers:1", "fix_state": "Affected", "package_name": "openshift-sandboxed-containers/osc-rhel8-operator", "product_name": "Red Hat Openshift Sandboxed Containers"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "bridge-marker-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "cluster-network-addons-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "cnv-containernetworking-plugins-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Fix deferred", "package_name": "cnv-must-gather-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "container-native-virtualization/vm-import-controller-rhel8", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "hostpath-provisioner-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "hostpath-provisioner-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Fix deferred", "package_name": "hyperconverged-cluster-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Fix deferred", "package_name": "hyperconverged-cluster-webhook-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "kubemacpool-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "kubernetes-nmstate-handler-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "kubevirt-ssp-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "kubevirt-template-validator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "kubevirt-vmware-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "node-maintenance-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "ovs-cni-marker-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "ovs-cni-plugin-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "virt-api-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "virt-cdi-apiserver-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "virt-cdi-cloner-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "virt-cdi-controller-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "virt-cdi-importer-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "virt-cdi-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "virt-cdi-uploadproxy-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "virt-cdi-uploadserver-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "virt-controller-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "virt-handler-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "virt-launcher-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Affected", "package_name": "virt-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "vm-import-operator-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:2", "fix_state": "Will not fix", "package_name": "vm-import-virtv2v-container", "product_name": "Red Hat OpenShift Virtualization 2"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/bridge-marker", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/cluster-network-addons-operator", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/cnv-containernetworking-plugins", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Not affected", "package_name": "container-native-virtualization/hostpath-provisioner-rhel8", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Not affected", "package_name": "container-native-virtualization/hostpath-provisioner-rhel8-operator", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/kubemacpool", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/kubernetes-nmstate-handler-rhel8", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/kubevirt-ssp-operator", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/kubevirt-template-validator", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/kubevirt-vmware", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Fix deferred", "package_name": "container-native-virtualization/node-maintenance-operator", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/ovs-cni-marker", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/ovs-cni-plugin", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/virt-api", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/virt-controller", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/virt-handler", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/virt-launcher", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/virt-operator", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/vm-import-controller-rhel8", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Will not fix", "package_name": "container-native-virtualization/vm-import-operator-rhel8", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:openstack:16.1", "fix_state": "Not affected", "package_name": "golang-github-Sirupsen-logrus", "product_name": "Red Hat OpenStack Platform 16.1"}, {"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Not affected", "package_name": "golang-github-Sirupsen-logrus", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/clair-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-bridge-operator-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-builder-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-container-security-operator-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-openshift-bridge-rhel8-operator", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-operator-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "etcd", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "golang", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Affected", "package_name": "grafana", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Out of support scope", "package_name": "heketi", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:storage:3", "fix_state": "Out of support scope", "package_name": "rhgs3/rhgs-gluster-block-prov-rhel7", "product_name": "Red Hat Storage 3"}, {"cpe": "cpe:/a:redhat:stf:1.0::el7", "fix_state": "Not affected", "package_name": "smart-gateway-container", "product_name": "Service Telemetry Framework 1.2 for RHEL 8"}, {"cpe": "cpe:/a:redhat:stf:1.3::el8", "fix_state": "Not affected", "package_name": "smart-gateway-container", "product_name": "Service Telemetry Framework 1.3 for RHEL 8"}, {"cpe": "cpe:/a:redhat:stf:1.3::el8", "fix_state": "Not affected", "package_name": "stf/sg-core-rhel8", "product_name": "Service Telemetry Framework 1.3 for RHEL 8"}], "public_date": "2021-03-22T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-29923\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-29923\nhttps://sick.codes/sick-2021-016/"], "statement": "This vulnerability potentially affects any component written in Go that uses the net standard library and ParseIP / ParseCIDR functions. There are components which might not use these functions or might use them to parse IP addresses and not manage them in any way (only store information about the ip address) . This reduces the severity of this vulnerability to Low for the following offerings:\n* OpenShift distributed tracing (formerly OpenShift Jaeger)\n* OpenShift Migration Toolkit for Containers\n* OpenShift Container Platform\nWithin regulated environments, a combination of the following controls acts as a significant barrier to successfully exploiting a CWE-20: Improper Input Validation vulnerability and therefore downgrades the severity of this particular CVE from Moderate to Low.\nRed Hat enforces the principle of least functionality, ensuring that only essential features, services, and ports are enabled. This minimizes the number of components that could be affected by input validation vulnerabilities. Security testing and evaluation standards are implemented within the environment to rigorously test input validation mechanisms during the development lifecycle, while static code analysis identifies potential input validation vulnerabilities by default. Process isolation ensures that processes handling potentially malicious or unvalidated inputs run in isolated environments by separating execution domains for each process. Malicious code protections, such as IPS/IDS and antimalware solutions, help detect and mitigate malicious payloads stemming from input validation vulnerabilities. Finally, robust input validation and error-handling mechanisms ensure all user inputs are thoroughly validated, preventing improperly validated inputs from causing system instability, exposing sensitive data, or escalating risks further.", "threat_severity": "Moderate"}

{}