title: Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey​ and ctx​. That function uses named return parameters to free pkey​ and ctx​ if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the "return nil, nil, fail(...)" pattern, meaning that pkey​ and ctx​ will be nil inside the deferred function that should free them.
problem types: Missing Release of Memory after Effective Lifetime
affected:
{
product: golang-fips/openssl
vendor: n/a
versions:
version: 2.0.1, status: unaffected
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 2.4 for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: receptor
defaultStatus: affected
versions:
version: 0:1.4.5-1.el8ap, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:ansible_automation_platform:2.4::el9, cpe:/a:redhat:ansible_automation_platform:2.4::el8, cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9, cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8, cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9, cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8]
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 2.4 for RHEL 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: receptor
defaultStatus: affected
versions:
version: 0:1.4.5-1.el9ap, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:ansible_automation_platform:2.4::el9, cpe:/a:redhat:ansible_automation_platform:2.4::el8, cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9, cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8, cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9, cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8]
}
{
vendor: Red Hat
product: Red Hat Developer Tools
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: go-toolset-1.19-golang
defaultStatus: affected
versions:
version: 0:1.19.13-6.el7_9, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:devtools:2023::el7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: go-toolset:rhel8
defaultStatus: affected
versions:
version: 8090020240313170136.26eb71ac, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:enterprise_linux:8::appstream
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: grafana-pcp
defaultStatus: affected
versions:
version: 0:5.1.1-2.el8_9, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:enterprise_linux:8::appstream
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: grafana
defaultStatus: affected
versions:
version: 0:9.2.10-8.el8_9, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:enterprise_linux:8::appstream
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang
defaultStatus: affected
versions:
version: 0:1.20.12-2.el9_3, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:enterprise_linux:9::appstream
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: grafana
defaultStatus: affected
versions:
version: 0:9.2.10-8.el9_3, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:enterprise_linux:9::appstream
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: grafana-pcp
defaultStatus: affected
versions:
version: 0:5.1.1-2.el9_3, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:enterprise_linux:9::appstream
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: buildah
defaultStatus: affected
versions:
version: 1:1.23.4-5.2.rhaos4.12.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: butane
defaultStatus: affected
versions:
version: 0:0.16.0-2.2.rhaos4.12.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: containernetworking-plugins
defaultStatus: affected
versions:
version: 1:1.4.0-1.1.rhaos4.12.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: cri-o
defaultStatus: affected
versions:
version: 0:1.25.5-13.1.rhaos4.12.git76343da.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: cri-tools
defaultStatus: affected
versions:
version: 0:1.25.0-2.2.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: ignition
defaultStatus: affected
versions:
version: 0:2.14.0-5.2.rhaos4.12.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-clients
defaultStatus: affected
versions:
version: 0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: podman
defaultStatus: affected
versions:
version: 3:4.4.1-2.1.rhaos4.12.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: runc
defaultStatus: affected
versions:
version: 3:1.1.6-5.2.rhaos4.12.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.12
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skopeo
defaultStatus: affected
versions:
version: 2:1.9.4-3.2.rhaos4.12.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.12::el9, cpe:/a:redhat:openshift:4.12::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: butane
defaultStatus: affected
versions:
version: 0:0.19.0-1.3.rhaos4.14.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: containernetworking-plugins
defaultStatus: affected
versions:
version: 1:1.4.0-1.2.rhaos4.14.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: cri-o
defaultStatus: affected
versions:
version: 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: cri-tools
defaultStatus: affected
versions:
version: 0:1.27.0-3.1.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: ignition
defaultStatus: affected
versions:
version: 0:2.16.2-2.1.rhaos4.14.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-clients
defaultStatus: affected
versions:
version: 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: ose-aws-ecr-image-credential-provider
defaultStatus: affected
versions:
version: 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: podman
defaultStatus: affected
versions:
version: 3:4.4.1-11.3.rhaos4.14.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skopeo
defaultStatus: affected
versions:
version: 2:1.11.2-10.3.rhaos4.14.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.14::el9, cpe:/a:redhat:openshift:4.14::el8]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.14
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: microshift
defaultStatus: affected
versions:
version: 0:4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:openshift:4.14::el9
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: buildah
defaultStatus: affected
versions:
version: 1:1.29.1-20.3.rhaos4.15.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: butane
defaultStatus: affected
versions:
version: 0:0.20.0-1.1.rhaos4.15.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: containernetworking-plugins
defaultStatus: affected
versions:
version: 1:1.4.0-1.2.rhaos4.15.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: cri-o
defaultStatus: affected
versions:
version: 0:1.28.4-8.rhaos4.15.git24f50b9.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: cri-tools
defaultStatus: affected
versions:
version: 0:1.28.0-3.1.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: ignition
defaultStatus: affected
versions:
version: 0:2.16.2-2.1.rhaos4.15.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-clients
defaultStatus: affected
versions:
version: 0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: ose-aws-ecr-image-credential-provider
defaultStatus: affected
versions:
version: 0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: podman
defaultStatus: affected
versions:
version: 3:4.4.1-21.1.rhaos4.15.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: runc
defaultStatus: affected
versions:
version: 4:1.1.12-1.1.rhaos4.15.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skopeo
defaultStatus: affected
versions:
version: 2:1.11.2-21.2.rhaos4.15.el8, lessThan: *, versionType: rpm, status: unaffected
cpe: [cpe:/a:redhat:openshift:4.15::el8, cpe:/a:redhat:openshift:4.15::el9]
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4.15
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: microshift
defaultStatus: affected
versions:
version: 0:4.15.6-202403280951.p0.g94b1c2a.assembly.4.15.6.el9, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:openshift:4.15::el9
}
{
vendor: Red Hat
product: NBDE Tang Server
collectionURL: https://catalog.redhat.com/software/containers/
packageName: tang-operator-bundle-container
defaultStatus: affected
cpes: cpe:/a:redhat:network_bound_disk_encryption_tang:1
}
{
vendor: Red Hat
product: OpenShift Developer Tools and Services
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: helm
defaultStatus: affected
cpes: cpe:/a:redhat:ocp_tools
}
{
vendor: Red Hat
product: OpenShift Developer Tools and Services
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: odo
defaultStatus: affected
cpes: cpe:/a:redhat:ocp_tools
}
{
vendor: Red Hat
product: OpenShift Pipelines
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-pipelines-client
defaultStatus: affected
cpes: cpe:/a:redhat:openshift_pipelines:1
}
{
vendor: Red Hat
product: OpenShift Serverless
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-serverless-clients
defaultStatus: unknown
cpes: cpe:/a:redhat:serverless:1
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 1.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: helm
defaultStatus: affected
cpes: cpe:/a:redhat:ansible_automation_platform
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 1.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-clients
defaultStatus: affected
cpes: cpe:/a:redhat:ansible_automation_platform
}
{
vendor: Red Hat
product: Red Hat Ansible Automation Platform 2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-clients
defaultStatus: affected
cpes: cpe:/a:redhat:ansible_automation_platform:2
}
{
vendor: Red Hat
product: Red Hat Certification for Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: redhat-certification-preflight
defaultStatus: unknown
cpes: cpe:/a:redhat:certifications:1::el8
}
{
vendor: Red Hat
product: Red Hat Certification for Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: redhat-certification-preflight
defaultStatus: unknown
cpes: cpe:/a:redhat:certifications:1::el9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: buildah
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: containernetworking-plugins
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: host-metering
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: podman
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rhc-worker-script
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skopeo
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/buildah
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/conmon
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/containernetworking-plugins
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/podman
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/runc
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/skopeo
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:4.0/toolbox
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/buildah
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/conmon
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/containernetworking-plugins
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/podman
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/runc
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/skopeo
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: container-tools:rhel8/toolbox
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: git-lfs
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: osbuild-composer
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rhc
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: weldr-client
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: buildah
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: butane
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: conmon
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: containernetworking-plugins
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: git-lfs
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: gvisor-tap-vsock
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: ignition
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: osbuild-composer
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: podman
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: runc
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skopeo
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: toolbox
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: weldr-client
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: conmon
defaultStatus: unaffected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: conmon-rs
defaultStatus: unaffected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang-github-prometheus-promu
defaultStatus: unaffected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://catalog.redhat.com/software/containers/
packageName: lifecycle-agent-operator-bundle-container
defaultStatus: unaffected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift
defaultStatus: affected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift4/bare-metal-event-relay-operator-bundle
defaultStatus: unknown
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift4/numaresources-operator-bundle
defaultStatus: unaffected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift4/ose-cluster-machine-approver
defaultStatus: affected
cpes: cpe:/a:redhat:openshift:4
}
{
vendor: Red Hat
product: Red Hat Openshift Container Storage 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: mcg
defaultStatus: unknown
cpes: cpe:/a:redhat:openshift_container_storage:4
}
{
vendor: Red Hat
product: Red Hat Openshift Data Foundation 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: mcg
defaultStatus: affected
cpes: cpe:/a:redhat:openshift_data_foundation:4
}
{
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: devspaces/machineexec-rhel8
defaultStatus: affected
cpes: cpe:/a:redhat:openshift_devspaces:3::el8
}
{
vendor: Red Hat
product: Red Hat OpenShift GitOps
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openshift-gitops-1/gitops-operator-bundle
defaultStatus: affected
cpes: cpe:/a:redhat:openshift_gitops:1
}
{
vendor: Red Hat
product: Red Hat OpenShift on AWS
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rosa
defaultStatus: affected
cpes: cpe:/a:redhat:openshift_service_on_aws:1
}
{
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kubevirt
defaultStatus: affected
cpes: cpe:/a:redhat:container_native_virtualization:4
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: etcd
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:16.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang-qpid-apache
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:16.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: qpid-proton
defaultStatus: unaffected
cpes: cpe:/a:redhat:openstack:16.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: etcd
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:16.2
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang-github-infrawatch-apputils
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:16.2
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang-qpid-apache
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:16.2
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: qpid-proton
defaultStatus: unaffected
cpes: cpe:/a:redhat:openstack:16.2
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: etcd
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:17.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang-github-infrawatch-apputils
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:17.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: golang-qpid-apache
defaultStatus: affected
cpes: cpe:/a:redhat:openstack:17.1
}
{
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: qpid-proton
defaultStatus: unaffected
cpes: cpe:/a:redhat:openstack:17.1
}
{
vendor: Red Hat
product: Red Hat Service Interconnect 1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: qpid-proton
defaultStatus: unknown
cpes: cpe:/a:redhat:service_interconnect:1
}
{
vendor: Red Hat
product: Red Hat Service Interconnect 1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skupper-cli
defaultStatus: unknown
cpes: cpe:/a:redhat:service_interconnect:1
}
{
vendor: Red Hat
product: Red Hat Service Interconnect 1
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: skupper-router
defaultStatus: unknown
cpes: cpe:/a:redhat:service_interconnect:1
}
{
vendor: Red Hat
product: Red Hat Software Collections
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: rh-git227-git-lfs
defaultStatus: unaffected
cpes: cpe:/a:redhat:rhel_software_collections:3
}
{
vendor: Red Hat
product: Red Hat Storage 3
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: heketi
defaultStatus: unknown
cpes: cpe:/a:redhat:storage:3
}
metrics:
other: [
content: {'value': 'Important', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]