rhsa-2025_0664
Vulnerability from csaf_redhat
Published
2025-01-23 13:02
Modified
2025-03-28 11:01
Summary
Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements
Notes
Topic
Release of OpenShift Serverless Logic 1.35.0
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release includes security, bug fixes, and enhancements.
Security Fix(es):
* com.graphql-java/graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094)
* openshift-serverless-1-logic-rhel8-operator-container: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)
* path-to-regexp: Backtracking regular expressions cause ReDoS (CVE-2024-45296)
For more details about the security issues, including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE pages listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Release of OpenShift Serverless Logic 1.35.0\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release includes security, bug fixes, and enhancements.\n\nSecurity Fix(es):\n\n* com.graphql-java/graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java (CVE-2024-40094)\n\n* openshift-serverless-1-logic-rhel8-operator-container: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)\n\n* path-to-regexp: Backtracking regular expressions cause ReDoS (CVE-2024-45296)\n\nFor more details about the security issues, including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE pages listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:0664",
"url": "https://access.redhat.com/errata/RHSA-2025:0664"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2268046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046"
},
{
"category": "external",
"summary": "2301456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301456"
},
{
"category": "external",
"summary": "2310908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310908"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0664.json"
}
],
"title": "Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update \u0026 enhancements",
"tracking": {
"current_release_date": "2025-03-28T11:01:29+00:00",
"generator": {
"date": "2025-03-28T11:01:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.4.2"
}
},
"id": "RHSA-2025:0664",
"initial_release_date": "2025-01-23T13:02:37+00:00",
"revision_history": [
{
"date": "2025-01-23T13:02:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-01-23T13:02:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-03-28T11:01:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "8Base-Openshift-Serverless-1.35",
"product": {
"name": "8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_serverless:1.35::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Serverless"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"product_id": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-ephemeral-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"product_id": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-postgresql-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"product_id": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"product_id": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-postgresql-rhel8\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"product_id": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-operator-bundle\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"product_id": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-rhel8-operator\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"product_id": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-builder-rhel8\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
"product": {
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
"product_id": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-devmode-rhel8\u0026tag=1.35.0-6"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"product": {
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"product_id": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-ephemeral-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"product": {
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"product_id": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-postgresql-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"product": {
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"product_id": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"product": {
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"product_id": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-postgresql-rhel8\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"product": {
"name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"product_id": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8\u0026tag=1.35.0-2"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"product": {
"name": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"product_id": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-management-console-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"product": {
"name": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"product_id": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-operator-bundle\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"product": {
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"product_id": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-rhel8-operator\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"product": {
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"product_id": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-builder-rhel8\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"product": {
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"product_id": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-devmode-rhel8\u0026tag=1.35.0-6"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"product": {
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"product_id": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-ephemeral-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"product": {
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"product_id": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-data-index-postgresql-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"product": {
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"product_id": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"product": {
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"product_id": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-jobs-service-postgresql-rhel8\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"product": {
"name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"product_id": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8\u0026tag=1.35.0-2"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"product": {
"name": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"product_id": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-operator-bundle\u0026tag=1.35.0-5"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"product": {
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"product_id": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-rhel8-operator\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"product": {
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"product_id": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-builder-rhel8\u0026tag=1.35.0-6"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"product": {
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"product_id": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-serverless-1/logic-swf-devmode-rhel8\u0026tag=1.35.0-6"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64"
},
"product_reference": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64"
},
"product_reference": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64"
},
"product_reference": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64"
},
"product_reference": "openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64"
},
"product_reference": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64"
},
"product_reference": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64"
},
"product_reference": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64"
},
"product_reference": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64"
},
"product_reference": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64"
},
"product_reference": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64"
},
"product_reference": "openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64"
},
"product_reference": "openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64"
},
"product_reference": "openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64"
},
"product_reference": "openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64"
},
"product_reference": "openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64"
},
"product_reference": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64"
},
"product_reference": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64"
},
"product_reference": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64 as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64"
},
"product_reference": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"relates_to_product_reference": "8Base-RHOSS-1.35"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le as a component of 8Base-Openshift-Serverless-1.35",
"product_id": "8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
},
"product_reference": "openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le",
"relates_to_product_reference": "8Base-RHOSS-1.35"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-24786",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2024-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268046"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Golang\u0027s protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24786"
},
{
"category": "external",
"summary": "RHBZ#2268046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786"
},
{
"category": "external",
"summary": "https://go.dev/cl/569356",
"url": "https://go.dev/cl/569356"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/",
"url": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2611",
"url": "https://pkg.go.dev/vuln/GO-2024-2611"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-23T13:02:37+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0664"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON"
},
{
"cve": "CVE-2024-40094",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-07-30T07:20:08+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2301456"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service (DoS) attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields (ENFs), which are not adequately considered during the introspection query process. This issue could lead to resource exhaustion and service disruption under certain conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40094"
},
{
"category": "external",
"summary": "RHBZ#2301456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40094",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40094"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40094",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40094"
},
{
"category": "external",
"summary": "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a",
"url": "https://github.com/graphql-java/graphql-java/commit/97743bc1b5caa2b0bd894dc8e128b47e4d771e4a"
},
{
"category": "external",
"summary": "https://github.com/graphql-java/graphql-java/discussions/3641",
"url": "https://github.com/graphql-java/graphql-java/discussions/3641"
},
{
"category": "external",
"summary": "https://github.com/graphql-java/graphql-java/pull/3539",
"url": "https://github.com/graphql-java/graphql-java/pull/3539"
},
{
"category": "external",
"summary": "https://github.com/graphql-java/graphql-java/releases/tag/v19.11",
"url": "https://github.com/graphql-java/graphql-java/releases/tag/v19.11"
},
{
"category": "external",
"summary": "https://github.com/graphql-java/graphql-java/releases/tag/v20.9",
"url": "https://github.com/graphql-java/graphql-java/releases/tag/v20.9"
},
{
"category": "external",
"summary": "https://github.com/graphql-java/graphql-java/releases/tag/v21.5",
"url": "https://github.com/graphql-java/graphql-java/releases/tag/v21.5"
}
],
"release_date": "2024-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-23T13:02:37+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0664"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java"
},
{
"cve": "CVE-2024-45296",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-09-09T19:20:18.127723+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310908"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp package, where it turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single-threaded and regex matching runs on the main thread, poor performance will block the event loop and lead to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: Backtracking regular expressions cause ReDoS",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45296"
},
{
"category": "external",
"summary": "RHBZ#2310908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310908"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45296",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45296"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45296",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45296"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f",
"url": "https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6",
"url": "https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6"
},
{
"category": "external",
"summary": "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j",
"url": "https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j"
}
],
"release_date": "2024-09-09T19:15:13.330000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-23T13:02:37+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0664"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:56afce3767c0107b1d8eddb0e11349b9d590c22ebfee7a549f627c49136992d4_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:83e0e9053d0378243b998913a1eeb1389975ca206795db24b353ef3d0a033cad_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-ephemeral-rhel8@sha256:d7e430549b5bb731d2dcdfe035eaad09749a715a20fb317f0a298c2816416993_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:329594c53c4a745faf4d0cf5e545d67330c0aeae6ac00b64e9ec0f8ce0df184b_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:8f465cefedf8fa0ac5411984b47389e512c54f038be7ea6937f11b33a0ae544d_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:ef1070b9c74786f739aeca2bbb9e3a47737fe6fb94b914a66e87919dfa9d6e74_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:499153657dee98797271613cc36f621287c07ef217da630a05d8a97d89f62fd7_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:5821f6a8b84797f2786d88be10bcd064576e589ea3c57d1db90d100007322fd8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:e072472c48308e24fe8065837277a6886bd52ece5209dfcaf91bd29390d1f46a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:2ca2a45af55aef2a611e42106ee1deec6b77c143b41e4eabdd845b51661eb7e6_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:967bd9e6268ec3cc2ce974e6f43fa0b56773000dc74ea6330a26ca31d2b15df5_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:a71f103ea3d12753fd12e7e760729d2ded4fa8db9a297d3422857b6071dcac78_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:3eaa8f77385fca49bf0e8b17aa27b3b2cbfc41225e3c02d49205fd98c9a7ad03_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8@sha256:89282abb48abfecd20634112d03450452c795a33c22f43dca2582cb30055b490_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-management-console-rhel8@sha256:b78d197751ef9cfdbd57d682f3478f87c6bb4786a72c72f3e33762576ce0a204_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:13d391b2a921dcc79d38a452dfd3924c77a972a7cedae2a547a3820345c606c8_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:8f7be86799ab9e12431d755cf8fd7882b3bb870ed698c9b5ba51929d4cc9d01d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-operator-bundle@sha256:a1d1995b2b178a1242d41f1e8df4382d14317623ac05b91bf6be971f0ac5a227_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:35fa091442aea7a9b5bbff8581d51a954fc8a1c0d9c411de91ec547cb6b3d762_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:cb4dbd05449296fe6cdd8c5b54375b4f856d4d4ba4a0b634df370a248ba19820_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-rhel8-operator@sha256:f7d5c366b734c40aef8aefbe3e656fc633ae6c9011a0fffd65f01506067a695f_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:033cb5cf3fedea187bd9f72aa45ff081f7c9825b4e4235010172ce6a12610e8a_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:1533005bf710c95dca7b0b514f72df873f4a9c510697c76804eec32a5b5f057a_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-builder-rhel8@sha256:a1e75bc27adcbc4df57f4fdc289ca2eafd0fef9b87b2a78fcc523860a40aea0d_ppc64le",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:35877fb2aae353f2ed57f7a975a45f510fdf0cf8dc0070e52b47ed590af0f0b8_amd64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:7438efe5d9db033e410419ec6e7620a268192762a65d825c91950cd4a629c46f_arm64",
"8Base-RHOSS-1.35:openshift-serverless-1/logic-swf-devmode-rhel8@sha256:ff2bc62c20412ba5e7dcb4c71f9b6c56a250766e59031444461e5f4d626aa106_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "path-to-regexp: Backtracking regular expressions cause ReDoS"
}
]
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.