Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2021-40346
Vulnerability from cvelistv5
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T02:27:31.887Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.mail-archive.com/haproxy%40formilux.org" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://git.haproxy.org/?p=haproxy.git" }, { "name": "DSA-4968", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2021/dsa-4968" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.mail-archive.com/haproxy%40formilux.org/msg41114.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "name": "[cloudstack-dev] 20210910 CVE-2021-40346 (haproxy 2.x)", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120%40%3Cdev.cloudstack.apache.org%3E" }, { "name": "[cloudstack-dev] 20210910 Re: CVE-2021-40346 (haproxy 2.x)", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a%40%3Cdev.cloudstack.apache.org%3E" }, { "name": "FEDORA-2021-3493f9f6ab", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/" }, { "name": "FEDORA-2021-cd5ee418f6", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-09-17T21:06:26", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.mail-archive.com/haproxy%40formilux.org" }, { "tags": [ "x_refsource_MISC" ], "url": "https://git.haproxy.org/?p=haproxy.git" }, { "name": "DSA-4968", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2021/dsa-4968" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.mail-archive.com/haproxy%40formilux.org/msg41114.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/" }, { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "name": "[cloudstack-dev] 20210910 CVE-2021-40346 (haproxy 2.x)", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120%40%3Cdev.cloudstack.apache.org%3E" }, { "name": "[cloudstack-dev] 20210910 Re: CVE-2021-40346 (haproxy 2.x)", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a%40%3Cdev.cloudstack.apache.org%3E" }, { "name": "FEDORA-2021-3493f9f6ab", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/" }, { "name": "FEDORA-2021-cd5ee418f6", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-40346", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.mail-archive.com/haproxy@formilux.org", "refsource": "MISC", "url": "https://www.mail-archive.com/haproxy@formilux.org" }, { "name": "https://git.haproxy.org/?p=haproxy.git", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy.git" }, { "name": "DSA-4968", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2021/dsa-4968" }, { "name": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html", "refsource": "MISC", "url": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html" }, { "name": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/", "refsource": "MISC", "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/" }, { "name": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95", "refsource": "MISC", "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "name": "[cloudstack-dev] 20210910 CVE-2021-40346 (haproxy 2.x)", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120@%3Cdev.cloudstack.apache.org%3E" }, { "name": "[cloudstack-dev] 20210910 Re: CVE-2021-40346 (haproxy 2.x)", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a@%3Cdev.cloudstack.apache.org%3E" }, { "name": "FEDORA-2021-3493f9f6ab", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/" }, { "name": "FEDORA-2021-cd5ee418f6", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2021-40346", "datePublished": "2021-09-08T16:40:38", "dateReserved": "2021-08-31T00:00:00", "dateUpdated": "2024-08-04T02:27:31.887Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2021-40346\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2021-09-08T17:15:12.457\",\"lastModified\":\"2024-11-21T06:23:54.997\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.\"},{\"lang\":\"es\",\"value\":\"Se presenta un desbordamiento de enteros en HAProxy versiones 2.0 a 2.5, en la funci\u00f3n htx_add_header() que puede ser explotada para llevar a cabo un ataque de contrabando de peticiones HTTP, permitiendo a un atacante omitir todas las ACLs configuradas de HAProxy de peticiones http y posiblemente otras ACLs\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.0.0\",\"versionEndExcluding\":\"2.0.25\",\"matchCriteriaId\":\"2050D7B9-9E52-4564-9136-ABDB74F447A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndExcluding\":\"2.2.17\",\"matchCriteriaId\":\"4F0B3A48-87CC-490D-8C45-8BD6CCC01F80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.3.0\",\"versionEndExcluding\":\"2.3.14\",\"matchCriteriaId\":\"677D5326-42B8-4DF5-A4C3-AEA5EBBA2164\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.4.0\",\"versionEndExcluding\":\"2.4.4\",\"matchCriteriaId\":\"CED60B4E-A8D6-47C8-8E62-FB1E8224E51F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev0:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FC0BDE1-8904-4E26-B218-9F5FFF0F6F5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2325B4E6-F5FE-4978-8AD7-9FDBF8D0355C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD24FF4B-8E71-4111-AA2E-DC4DBC7D4961\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev3:*:*:*:*:*:*\",\"matchCriteriaId\":\"4589E520-FABF-438D-A7FB-EEDFD6EF75E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev4:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F9374A2-4E60-4BD7-81B0-53A8CE8019D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev5:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2291792-4194-4708-93E8-762B920B6DB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haproxy:haproxy:2.5:dev6:*:*:*:*:*:*\",\"matchCriteriaId\":\"42A575A1-A115-4AE7-8FEF-40356A9B17CD\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"}]}]}],\"references\":[{\"url\":\"https://git.haproxy.org/?p=haproxy.git\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120%40%3Cdev.cloudstack.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a%40%3Cdev.cloudstack.apache.org%3E\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.debian.org/security/2021/dsa-4968\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mail-archive.com/haproxy%40formilux.org\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.mail-archive.com/haproxy%40formilux.org/msg41114.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://git.haproxy.org/?p=haproxy.git\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120%40%3Cdev.cloudstack.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a%40%3Cdev.cloudstack.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2021/dsa-4968\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mail-archive.com/haproxy%40formilux.org\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.mail-archive.com/haproxy%40formilux.org/msg41114.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
rhsa-2022_0114
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 4.7.41 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.7.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.7.41. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHBA-2022:0117\n\nSecurity Fix(es):\n\n* haproxy: an HTTP method name may contain a space followed by the name of\na protected resource (CVE-2021-39241)\n* haproxy: request smuggling attack or response splitting via duplicate\ncontent-length header (CVE-2021-40346)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.7 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2022:0114", "url": "https://access.redhat.com/errata/RHSA-2022:0114" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0114.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.7.41 security update", "tracking": { "current_release_date": "2024-11-22T17:49:48+00:00", "generator": { "date": "2024-11-22T17:49:48+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2022:0114", "initial_release_date": "2022-01-19T13:25:21+00:00", "revision_history": [ { "date": "2022-01-19T13:25:21+00:00", "number": "1", "summary": "Initial version" }, { "date": "2022-01-19T13:25:21+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T17:49:48+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.7", "product": { "name": "Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.7::el8" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.7", "product": { "name": "Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.7::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "product": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "product_id": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "product": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "product_id": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.20.6-5.rhaos4.7.git8594c20.el8?arch=src" } } }, { "category": "product_version", "name": "haproxy-0:2.0.19-2.el8.src", "product": { "name": "haproxy-0:2.0.19-2.el8.src", "product_id": "haproxy-0:2.0.19-2.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.0.19-2.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "product": { "name": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "product_id": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.7.0-202201082234.p0.ge880017.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "product": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "product_id": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202201082234.p0.g25914b8.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "product": { "name": "openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "product_id": "openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr@4.7.0-202201082234.p0.g72de60e.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "product": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "product_id": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.20.6-5.rhaos4.7.git8594c20.el7?arch=src" } } }, { "category": "product_version", "name": "haproxy-0:2.0.19-2.el7.src", "product": { "name": "haproxy-0:2.0.19-2.el7.src", "product_id": "haproxy-0:2.0.19-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.0.19-2.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "product": { "name": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "product_id": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.7.0-202201082234.p0.ge880017.assembly.stream.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "product": { "name": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "product_id": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible@4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "product": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "product_id": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202201082234.p0.g25914b8.assembly.stream.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "product": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "product_id": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product_id": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.20.6-5.rhaos4.7.git8594c20.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product": { "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product_id": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.6-5.rhaos4.7.git8594c20.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product_id": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.6-5.rhaos4.7.git8594c20.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-0:2.0.19-2.el8.x86_64", "product": { "name": "haproxy20-0:2.0.19-2.el8.x86_64", "product_id": "haproxy20-0:2.0.19-2.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.19-2.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.19-2.el8.x86_64", "product": { "name": "haproxy-debugsource-0:2.0.19-2.el8.x86_64", "product_id": "haproxy-debugsource-0:2.0.19-2.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.19-2.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.19-2.el8.x86_64", "product": { "name": "haproxy20-debuginfo-0:2.0.19-2.el8.x86_64", "product_id": "haproxy20-debuginfo-0:2.0.19-2.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.19-2.el8?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "product": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "product_id": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202201082234.p0.ge880017.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "product": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "product_id": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202201082234.p0.g25914b8.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "product": { "name": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "product_id": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.7.0-202201082234.p0.g25914b8.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "product": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "product_id": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.20.6-5.rhaos4.7.git8594c20.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "product": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "product_id": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.6-5.rhaos4.7.git8594c20.el7?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-0:2.0.19-2.el7.x86_64", "product": { "name": "haproxy20-0:2.0.19-2.el7.x86_64", "product_id": "haproxy20-0:2.0.19-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.19-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "product": { "name": "haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "product_id": "haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@2.0.19-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "product": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "product_id": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202201082234.p0.ge880017.assembly.stream.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "product": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "product_id": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202201082234.p0.g25914b8.assembly.stream.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "product": { "name": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "product_id": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.7.0-202201082234.p0.g25914b8.assembly.stream.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "product": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "product_id": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product_id": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.20.6-5.rhaos4.7.git8594c20.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product": { "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product_id": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.6-5.rhaos4.7.git8594c20.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product_id": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.6-5.rhaos4.7.git8594c20.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy20-0:2.0.19-2.el8.ppc64le", "product": { "name": "haproxy20-0:2.0.19-2.el8.ppc64le", "product_id": "haproxy20-0:2.0.19-2.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.19-2.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "product": { "name": "haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "product_id": "haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.19-2.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "product": { "name": "haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "product_id": "haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.19-2.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "product": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "product_id": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202201082234.p0.ge880017.assembly.stream.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "product": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "product_id": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202201082234.p0.g25914b8.assembly.stream.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "product": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "product_id": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/atomic-openshift-service-idler@4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8?arch=s390x" } } }, { "category": "product_version", "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product_id": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.20.6-5.rhaos4.7.git8594c20.el8?arch=s390x" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product": { "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product_id": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.6-5.rhaos4.7.git8594c20.el8?arch=s390x" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product_id": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.6-5.rhaos4.7.git8594c20.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy20-0:2.0.19-2.el8.s390x", "product": { "name": "haproxy20-0:2.0.19-2.el8.s390x", "product_id": "haproxy20-0:2.0.19-2.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.19-2.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.19-2.el8.s390x", "product": { "name": "haproxy-debugsource-0:2.0.19-2.el8.s390x", "product_id": "haproxy-debugsource-0:2.0.19-2.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.19-2.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "product": { "name": "haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "product_id": "haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.19-2.el8?arch=s390x" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "product": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "product_id": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.7.0-202201082234.p0.ge880017.assembly.stream.el8?arch=s390x" } } }, { "category": "product_version", "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "product": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "product_id": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202201082234.p0.g25914b8.assembly.stream.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-cni@4.7.0-202201082234.p0.g72de60e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-common@4.7.0-202201082234.p0.g72de60e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-controller@4.7.0-202201082234.p0.g72de60e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product": { "name": "python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_id": "python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-kuryr-kubernetes@4.7.0-202201082234.p0.g72de60e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "product": { "name": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "product_id": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible@4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7?arch=noarch" } } }, { "category": "product_version", "name": "openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "product": { "name": "openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "product_id": "openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-ansible-test@4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src" }, "product_reference": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64" }, "product_reference": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64" }, "product_reference": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.0.19-2.el7.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src" }, "product_reference": "haproxy-0:2.0.19-2.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:2.0.19-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64" }, "product_reference": "haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.19-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64" }, "product_reference": "haproxy20-0:2.0.19-2.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src" }, "product_reference": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch" }, "product_reference": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src" }, "product_reference": "openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch" }, "product_reference": "openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src" }, "product_reference": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64" }, "product_reference": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64" }, "product_reference": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64" }, "product_reference": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le" }, "product_reference": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x" }, "product_reference": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src" }, "product_reference": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64" }, "product_reference": "atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le" }, "product_reference": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x" }, "product_reference": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src" }, "product_reference": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64" }, "product_reference": "cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le" }, "product_reference": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x" }, "product_reference": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64" }, "product_reference": "cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le" }, "product_reference": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x" }, "product_reference": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64" }, "product_reference": "cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.0.19-2.el8.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src" }, "product_reference": "haproxy-0:2.0.19-2.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.19-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le" }, "product_reference": "haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.19-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x" }, "product_reference": "haproxy-debugsource-0:2.0.19-2.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.19-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64" }, "product_reference": "haproxy-debugsource-0:2.0.19-2.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.19-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le" }, "product_reference": "haproxy20-0:2.0.19-2.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.19-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x" }, "product_reference": "haproxy20-0:2.0.19-2.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.19-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64" }, "product_reference": "haproxy20-0:2.0.19-2.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le" }, "product_reference": "haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.19-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x" }, "product_reference": "haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.19-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" }, "product_reference": "haproxy20-debuginfo-0:2.0.19-2.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src" }, "product_reference": "openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le" }, "product_reference": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x" }, "product_reference": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src" }, "product_reference": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64" }, "product_reference": "openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64" }, "product_reference": "openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le" }, "product_reference": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x" }, "product_reference": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64" }, "product_reference": "openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src" }, "product_reference": "openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.7" }, { "category": "default_component_of", "full_product_name": { "name": "python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7", "product_id": "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" }, "product_reference": "python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.7" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-39241", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995107" } ], "notes": [ { "category": "description", "text": "haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected resource. The highest threat from this vulnerability is possible confidentiality concerns.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39241" }, { "category": "external", "summary": "RHBZ#1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39241", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39241" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-19T13:25:21+00:00", "details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:0114" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource" }, { "cve": "CVE-2021-40346", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2021-08-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2000599" } ], "notes": [ { "category": "description", "text": "Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while parsing an HTTP request. The highest threat from this vulnerability is integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: request smuggling attack or response splitting via duplicate content-length header", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-40346" }, { "category": "external", "summary": "RHBZ#2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40346", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346" }, { "category": "external", "summary": "https://www.haproxy.org/download/2.4/src/CHANGELOG", "url": "https://www.haproxy.org/download/2.4/src/CHANGELOG" } ], "release_date": "2021-09-08T17:37:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-19T13:25:21+00:00", "details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:0114" }, { "category": "workaround", "details": "To mitigate this problem the following can be added to proxy config:\n\nhttp-request deny if { req.hdr_cnt(content-length) gt 1 }\nhttp-response deny if { res.hdr_cnt(content-length) gt 1 }", "product_ids": [ "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.src", "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-ansible-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-ansible-test-0:4.7.0-202201082234.p0.g4a5273a.assembly.stream.el7.noarch", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el7.x86_64", "7Server-RH7-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el7.x86_64", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.src", "8Base-RHOSE-4.7:atomic-openshift-service-idler-0:4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.src", "8Base-RHOSE-4.7:cri-o-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.ppc64le", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.s390x", "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.6-5.rhaos4.7.git8594c20.el8.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:openshift-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202201082234.p0.g25914b8.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.s390x", "8Base-RHOSE-4.7:openshift-hyperkube-0:4.7.0-202201082234.p0.ge880017.assembly.stream.el8.x86_64", "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.src", "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch", "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202201082234.p0.g72de60e.assembly.stream.el8.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.7:haproxy-0:2.0.19-2.el7.src", "7Server-RH7-RHOSE-4.7:haproxy-debuginfo-0:2.0.19-2.el7.x86_64", "7Server-RH7-RHOSE-4.7:haproxy20-0:2.0.19-2.el7.x86_64", "8Base-RHOSE-4.7:haproxy-0:2.0.19-2.el8.src", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy-debugsource-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-0:2.0.19-2.el8.x86_64", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.ppc64le", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.s390x", "8Base-RHOSE-4.7:haproxy20-debuginfo-0:2.0.19-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: request smuggling attack or response splitting via duplicate content-length header" } ] }
rhsa-2021_4118
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 4.9.6 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.9.6. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHBA-2021:4119\n\nSecurity Fix(es):\n\n* haproxy: does not ensure that the scheme and path portions of a URI have\nthe expected characters (CVE-2021-39240)\n* haproxy: an HTTP method name may contain a space followed by the name of\na protected resource (CVE-2021-39241)\n* haproxy: it can lead to a situation with an attacker-controlled HTTP Host\nheader because a mismatch between Host and authority is mishandled\n(CVE-2021-39242)\n* haproxy: request smuggling attack or response splitting via duplicate\ncontent-length header (CVE-2021-40346)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.9 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:4118", "url": "https://access.redhat.com/errata/RHSA-2021:4118" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1995104", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995104" }, { "category": "external", "summary": "1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "1995112", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995112" }, { "category": "external", "summary": "2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4118.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update", "tracking": { "current_release_date": "2024-11-22T17:49:26+00:00", "generator": { "date": "2024-11-22T17:49:26+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:4118", "initial_release_date": "2021-11-10T20:49:50+00:00", "revision_history": [ { "date": "2021-11-10T20:49:50+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-11-10T20:49:50+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T17:49:26+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.9", "product": { "name": "Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.9::el8" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.9", "product": { "name": "Red Hat OpenShift Container Platform 4.9", "product_id": "7Server-RH7-RHOSE-4.9", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.9::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "product": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "product_id": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=src" } } }, { "category": "product_version", "name": "haproxy-0:2.2.15-2.el8.src", "product": { "name": "haproxy-0:2.2.15-2.el8.src", "product_id": "haproxy-0:2.2.15-2.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.2.15-2.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "product": { "name": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "product_id": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "product": { "name": "openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "product_id": "openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr@4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "product": { "name": "openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "product_id": "openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openstack-ironic@18.1.1-0.20211019162143.e0437cd.el8?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "product": { "name": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "product_id": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-91.rhaos4.9.gitd745cab.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "product": { "name": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "product_id": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product_id": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product_id": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product_id": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.2.15-2.el8.x86_64", "product": { "name": "haproxy-debugsource-0:2.2.15-2.el8.x86_64", "product_id": "haproxy-debugsource-0:2.2.15-2.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.15-2.el8?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "product": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "product_id": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "product": { "name": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "product_id": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-91.rhaos4.9.gitd745cab.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "product": { "name": "cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "product_id": "cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.22.0-91.rhaos4.9.gitd745cab.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "product": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "product_id": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product_id": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=aarch64" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product_id": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=aarch64" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product_id": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=aarch64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.2.15-2.el8.aarch64", "product": { "name": "haproxy-debugsource-0:2.2.15-2.el8.aarch64", "product_id": "haproxy-debugsource-0:2.2.15-2.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.15-2.el8?arch=aarch64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "product": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "product_id": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product_id": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product_id": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product_id": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "product": { "name": "haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "product_id": "haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.15-2.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "product": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "product_id": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product_id": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=s390x" } } }, { "category": "product_version", "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product_id": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debugsource@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=s390x" } } }, { "category": "product_version", "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product_id": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.22.0-78.rhaos4.9.gitd745cab.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.2.15-2.el8.s390x", "product": { "name": "haproxy-debugsource-0:2.2.15-2.el8.s390x", "product_id": "haproxy-debugsource-0:2.2.15-2.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.15-2.el8?arch=s390x" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "product": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "product_id": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-cni@4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-common@4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-controller@4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product": { "name": "python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_id": "python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-kuryr-kubernetes@4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product": { "name": "openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_id": "openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openstack-ironic-api@18.1.1-0.20211019162143.e0437cd.el8?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product": { "name": "openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_id": "openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openstack-ironic-common@18.1.1-0.20211019162143.e0437cd.el8?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product": { "name": "openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_id": "openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openstack-ironic-conductor@18.1.1-0.20211019162143.e0437cd.el8?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product": { "name": "python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_id": "python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-ironic-tests@18.1.1-0.20211019162143.e0437cd.el8?arch=noarch\u0026epoch=1" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src" }, "product_reference": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64" }, "product_reference": "cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64" }, "product_reference": "cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src" }, "product_reference": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64" }, "product_reference": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64" }, "product_reference": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le" }, "product_reference": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x" }, "product_reference": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src" }, "product_reference": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64" }, "product_reference": "cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64" }, "product_reference": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le" }, "product_reference": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x" }, "product_reference": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64" }, "product_reference": "cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64" }, "product_reference": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le" }, "product_reference": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x" }, "product_reference": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64" }, "product_reference": "cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.2.15-2.el8.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src" }, "product_reference": "haproxy-0:2.2.15-2.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.15-2.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64" }, "product_reference": "haproxy-debugsource-0:2.2.15-2.el8.aarch64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.15-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le" }, "product_reference": "haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.15-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x" }, "product_reference": "haproxy-debugsource-0:2.2.15-2.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.15-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" }, "product_reference": "haproxy-debugsource-0:2.2.15-2.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src" }, "product_reference": "openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64" }, "product_reference": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le" }, "product_reference": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x" }, "product_reference": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64" }, "product_reference": "openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src" }, "product_reference": "openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src" }, "product_reference": "openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch" }, "product_reference": "openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch" }, "product_reference": "openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch" }, "product_reference": "openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch" }, "product_reference": "python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" }, { "category": "default_component_of", "full_product_name": { "name": "python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.9", "product_id": "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" }, "product_reference": "python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.9" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-39240", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995104" } ], "notes": [ { "category": "description", "text": "A flaw was found in haproxy. An input validation flaw when processing HTTP/2 requests causes haproxy to not ensure that the scheme and path portions of a URI have the expected characters. This may cause specially crafted input to bypass implemented security restrictions. The highest threat from this vulnerability is confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: does not ensure that the scheme and path portions of a URI have the expected characters", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39240" }, { "category": "external", "summary": "RHBZ#1995104", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995104" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39240", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39240" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39240", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39240" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-11-10T20:49:50+00:00", "details": "For OpenShift Container Platform 4.9 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:4118" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: does not ensure that the scheme and path portions of a URI have the expected characters" }, { "cve": "CVE-2021-39241", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995107" } ], "notes": [ { "category": "description", "text": "haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected resource. The highest threat from this vulnerability is possible confidentiality concerns.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39241" }, { "category": "external", "summary": "RHBZ#1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39241", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39241" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-11-10T20:49:50+00:00", "details": "For OpenShift Container Platform 4.9 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:4118" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource" }, { "cve": "CVE-2021-39242", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995112" } ], "notes": [ { "category": "description", "text": "haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it\u0027s possible to drop the Host header and use the authority only after forwarding to a\r\nsecond http2 layer, possibly causing two differing values of Host at a different stage. The highest threat from this vulnerability is data integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39242" }, { "category": "external", "summary": "RHBZ#1995112", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995112" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39242", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39242" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-11-10T20:49:50+00:00", "details": "For OpenShift Container Platform 4.9 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:4118" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled" }, { "cve": "CVE-2021-40346", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2021-08-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2000599" } ], "notes": [ { "category": "description", "text": "Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while parsing an HTTP request. The highest threat from this vulnerability is integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: request smuggling attack or response splitting via duplicate content-length header", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-40346" }, { "category": "external", "summary": "RHBZ#2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40346", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346" }, { "category": "external", "summary": "https://www.haproxy.org/download/2.4/src/CHANGELOG", "url": "https://www.haproxy.org/download/2.4/src/CHANGELOG" } ], "release_date": "2021-09-08T17:37:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-11-10T20:49:50+00:00", "details": "For OpenShift Container Platform 4.9 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:4118" }, { "category": "workaround", "details": "To mitigate this problem the following can be added to proxy config:\n\nhttp-request deny if { req.hdr_cnt(content-length) gt 1 }\nhttp-response deny if { res.hdr_cnt(content-length) gt 1 }", "product_ids": [ "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.src", "7Server-RH7-RHOSE-4.9:cri-o-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64", "7Server-RH7-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.src", "8Base-RHOSE-4.9:cri-o-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debuginfo-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.s390x", "8Base-RHOSE-4.9:cri-o-debugsource-0:1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64", "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64", "8Base-RHOSE-4.9:openshift-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x", "8Base-RHOSE-4.9:openshift-hyperkube-0:4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64", "8Base-RHOSE-4.9:openshift-kuryr-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src", "8Base-RHOSE-4.9:openshift-kuryr-cni-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-common-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openshift-kuryr-controller-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-1:18.1.1-0.20211019162143.e0437cd.el8.src", "8Base-RHOSE-4.9:openstack-ironic-api-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-common-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:openstack-ironic-conductor-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-ironic-tests-1:18.1.1-0.20211019162143.e0437cd.el8.noarch", "8Base-RHOSE-4.9:python3-kuryr-kubernetes-0:4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "8Base-RHOSE-4.9:haproxy-0:2.2.15-2.el8.src", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.aarch64", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.ppc64le", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.s390x", "8Base-RHOSE-4.9:haproxy-debugsource-0:2.2.15-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: request smuggling attack or response splitting via duplicate content-length header" } ] }
rhsa-2021_5208
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 4.8.25 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.8.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.8.25. See the following advisory for the container images for this release:\nhttps://access.redhat.com/errata/RHBA-2021:5209\n\nSecurity Fix(es):\n\n* haproxy: does not ensure that the scheme and path portions of a URI have\nthe expected characters (CVE-2021-39240)\n* haproxy: an HTTP method name may contain a space followed by the name of\na protected resource (CVE-2021-39241)\n* haproxy: it can lead to a situation with an attacker-controlled HTTP Host\nheader because a mismatch between Host and authority is mishandled\n(CVE-2021-39242)\n* haproxy: request smuggling attack or response splitting via duplicate\ncontent-length header (CVE-2021-40346)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:5208", "url": "https://access.redhat.com/errata/RHSA-2021:5208" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1995104", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995104" }, { "category": "external", "summary": "1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "1995112", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995112" }, { "category": "external", "summary": "2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "external", "summary": "2002703", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2002703" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2021_5208.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.8.25 security update", "tracking": { "current_release_date": "2024-11-22T17:49:33+00:00", "generator": { "date": "2024-11-22T17:49:33+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:5208", "initial_release_date": "2022-01-05T15:47:06+00:00", "revision_history": [ { "date": "2022-01-05T15:47:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2022-01-05T15:47:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T17:49:33+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.8", "product": { "name": "Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.8::el8" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.8", "product": { "name": "Red Hat OpenShift Container Platform 4.8", "product_id": "7Server-RH7-RHOSE-4.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.8::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:2.2.13-2.el8.src", "product": { "name": "haproxy-0:2.2.13-2.el8.src", "product_id": "haproxy-0:2.2.13-2.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.2.13-2.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "product": { "name": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "product_id": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "product": { "name": "openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "product_id": "openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr@4.8.0-202112131630.p0.g839864c.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "ostree-0:2020.7-6.el8_4.src", "product": { "name": "ostree-0:2020.7-6.el8_4.src", "product_id": "ostree-0:2020.7-6.el8_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree@2020.7-6.el8_4?arch=src" } } }, { "category": "product_version", "name": "haproxy-0:2.2.13-2.el7.src", "product": { "name": "haproxy-0:2.2.13-2.el7.src", "product_id": "haproxy-0:2.2.13-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.2.13-2.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "product": { "name": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "product_id": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "haproxy-debugsource-0:2.2.13-2.el8.x86_64", "product": { "name": "haproxy-debugsource-0:2.2.13-2.el8.x86_64", "product_id": "haproxy-debugsource-0:2.2.13-2.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.13-2.el8?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "product": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "product_id": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-devel-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-devel-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-devel-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-devel@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-grub2-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-grub2-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-grub2-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-grub2@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-libs-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-libs-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-libs-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-libs@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-debugsource-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-debugsource-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-debugsource-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-debugsource@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-debuginfo@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "product": { "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "product_id": "ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-libs-debuginfo@2020.7-6.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "product": { "name": "haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "product_id": "haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@2.2.13-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "product": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "product_id": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "product": { "name": "haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "product_id": "haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.13-2.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "product": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "product_id": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree@2020.7-6.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-devel-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-devel-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-devel-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-devel@2020.7-6.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-grub2-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-grub2-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-grub2-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-grub2@2020.7-6.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-libs-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-libs-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-libs-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-libs@2020.7-6.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-debugsource@2020.7-6.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-debuginfo@2020.7-6.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "product": { "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "product_id": "ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-libs-debuginfo@2020.7-6.el8_4?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "haproxy-debugsource-0:2.2.13-2.el8.s390x", "product": { "name": "haproxy-debugsource-0:2.2.13-2.el8.s390x", "product_id": "haproxy-debugsource-0:2.2.13-2.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.2.13-2.el8?arch=s390x" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "product": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "product_id": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8?arch=s390x" } } }, { "category": "product_version", "name": "ostree-0:2020.7-6.el8_4.s390x", "product": { "name": "ostree-0:2020.7-6.el8_4.s390x", "product_id": "ostree-0:2020.7-6.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree@2020.7-6.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "ostree-devel-0:2020.7-6.el8_4.s390x", "product": { "name": "ostree-devel-0:2020.7-6.el8_4.s390x", "product_id": "ostree-devel-0:2020.7-6.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-devel@2020.7-6.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "ostree-libs-0:2020.7-6.el8_4.s390x", "product": { "name": "ostree-libs-0:2020.7-6.el8_4.s390x", "product_id": "ostree-libs-0:2020.7-6.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-libs@2020.7-6.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "ostree-debugsource-0:2020.7-6.el8_4.s390x", "product": { "name": "ostree-debugsource-0:2020.7-6.el8_4.s390x", "product_id": "ostree-debugsource-0:2020.7-6.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-debugsource@2020.7-6.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "ostree-debuginfo-0:2020.7-6.el8_4.s390x", "product": { "name": "ostree-debuginfo-0:2020.7-6.el8_4.s390x", "product_id": "ostree-debuginfo-0:2020.7-6.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-debuginfo@2020.7-6.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "product": { "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "product_id": "ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ostree-libs-debuginfo@2020.7-6.el8_4?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-cni@4.8.0-202112131630.p0.g839864c.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-common@4.8.0-202112131630.p0.g839864c.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product": { "name": "openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_id": "openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-kuryr-controller@4.8.0-202112131630.p0.g839864c.assembly.stream.el8?arch=noarch" } } }, { "category": "product_version", "name": "python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product": { "name": "python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_id": "python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-kuryr-kubernetes@4.8.0-202112131630.p0.g839864c.assembly.stream.el8?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.2.13-2.el7.src as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src" }, "product_reference": "haproxy-0:2.2.13-2.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:2.2.13-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64" }, "product_reference": "haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src" }, "product_reference": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64" }, "product_reference": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.2.13-2.el8.src as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src" }, "product_reference": "haproxy-0:2.2.13-2.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.13-2.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le" }, "product_reference": "haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.13-2.el8.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x" }, "product_reference": "haproxy-debugsource-0:2.2.13-2.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.2.13-2.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" }, "product_reference": "haproxy-debugsource-0:2.2.13-2.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src" }, "product_reference": "openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le" }, "product_reference": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x" }, "product_reference": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64" }, "product_reference": "openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src" }, "product_reference": "openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" }, "product_reference": "openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-0:2020.7-6.el8_4.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x" }, "product_reference": "ostree-0:2020.7-6.el8_4.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-0:2020.7-6.el8_4.src as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src" }, "product_reference": "ostree-0:2020.7-6.el8_4.src", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-debuginfo-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-debuginfo-0:2020.7-6.el8_4.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x" }, "product_reference": "ostree-debuginfo-0:2020.7-6.el8_4.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-debuginfo-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-debugsource-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-debugsource-0:2020.7-6.el8_4.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x" }, "product_reference": "ostree-debugsource-0:2020.7-6.el8_4.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-debugsource-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-debugsource-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-devel-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-devel-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-devel-0:2020.7-6.el8_4.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x" }, "product_reference": "ostree-devel-0:2020.7-6.el8_4.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-devel-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-devel-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-grub2-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-grub2-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-grub2-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-grub2-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-libs-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-libs-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-libs-0:2020.7-6.el8_4.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x" }, "product_reference": "ostree-libs-0:2020.7-6.el8_4.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-libs-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-libs-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le" }, "product_reference": "ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x" }, "product_reference": "ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64" }, "product_reference": "ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" }, "product_reference": "python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "relates_to_product_reference": "8Base-RHOSE-4.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-39240", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995104" } ], "notes": [ { "category": "description", "text": "A flaw was found in haproxy. An input validation flaw when processing HTTP/2 requests causes haproxy to not ensure that the scheme and path portions of a URI have the expected characters. This may cause specially crafted input to bypass implemented security restrictions. The highest threat from this vulnerability is confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: does not ensure that the scheme and path portions of a URI have the expected characters", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39240" }, { "category": "external", "summary": "RHBZ#1995104", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995104" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39240", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39240" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39240", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39240" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-05T15:47:06+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:5208" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: does not ensure that the scheme and path portions of a URI have the expected characters" }, { "cve": "CVE-2021-39241", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995107" } ], "notes": [ { "category": "description", "text": "haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected resource. The highest threat from this vulnerability is possible confidentiality concerns.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39241" }, { "category": "external", "summary": "RHBZ#1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39241", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39241" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-05T15:47:06+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:5208" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource" }, { "cve": "CVE-2021-39242", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995112" } ], "notes": [ { "category": "description", "text": "haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it\u0027s possible to drop the Host header and use the authority only after forwarding to a\r\nsecond http2 layer, possibly causing two differing values of Host at a different stage. The highest threat from this vulnerability is data integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39242" }, { "category": "external", "summary": "RHBZ#1995112", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995112" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39242", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39242" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-05T15:47:06+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:5208" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled" }, { "cve": "CVE-2021-40346", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2021-08-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2000599" } ], "notes": [ { "category": "description", "text": "Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while parsing an HTTP request. The highest threat from this vulnerability is integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: request smuggling attack or response splitting via duplicate content-length header", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-40346" }, { "category": "external", "summary": "RHBZ#2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40346", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346" }, { "category": "external", "summary": "https://www.haproxy.org/download/2.4/src/CHANGELOG", "url": "https://www.haproxy.org/download/2.4/src/CHANGELOG" } ], "release_date": "2021-09-08T17:37:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-05T15:47:06+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:5208" }, { "category": "workaround", "details": "To mitigate this problem the following can be added to proxy config:\n\nhttp-request deny if { req.hdr_cnt(content-length) gt 1 }\nhttp-response deny if { res.hdr_cnt(content-length) gt 1 }", "product_ids": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "7Server-RH7-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64", "8Base-RHOSE-4.8:openshift-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.s390x", "8Base-RHOSE-4.8:openshift-hyperkube-0:4.8.0-202112150047.p0.gb4b4813.assembly.stream.el8.x86_64", "8Base-RHOSE-4.8:openshift-kuryr-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.src", "8Base-RHOSE-4.8:openshift-kuryr-cni-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-common-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:openshift-kuryr-controller-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.src", "8Base-RHOSE-4.8:ostree-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-debugsource-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-devel-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-grub2-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.ppc64le", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.s390x", "8Base-RHOSE-4.8:ostree-libs-debuginfo-0:2020.7-6.el8_4.x86_64", "8Base-RHOSE-4.8:python3-kuryr-kubernetes-0:4.8.0-202112131630.p0.g839864c.assembly.stream.el8.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.8:haproxy-0:2.2.13-2.el7.src", "7Server-RH7-RHOSE-4.8:haproxy-debuginfo-0:2.2.13-2.el7.x86_64", "8Base-RHOSE-4.8:haproxy-0:2.2.13-2.el8.src", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.ppc64le", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.s390x", "8Base-RHOSE-4.8:haproxy-debugsource-0:2.2.13-2.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: request smuggling attack or response splitting via duplicate content-length header" } ] }
rhsa-2022_0024
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 4.6.53 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.6.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.6.53. See the following advisory for the container images for this release:\n\nhttps://access.redhat.com/errata/RHBA-2022:0025\n\nSecurity Fix(es):\n\n* haproxy: an HTTP method name may contain a space followed by the name of\na protected resource (CVE-2021-39241)\n* haproxy: request smuggling attack or response splitting via duplicate\ncontent-length header (CVE-2021-40346)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2022:0024", "url": "https://access.redhat.com/errata/RHSA-2022:0024" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "external", "summary": "2037401", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2037401" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0024.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.6.53 security update", "tracking": { "current_release_date": "2024-11-22T17:49:40+00:00", "generator": { "date": "2024-11-22T17:49:40+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2022:0024", "initial_release_date": "2022-01-12T08:49:15+00:00", "revision_history": [ { "date": "2022-01-12T08:49:15+00:00", "number": "1", "summary": "Initial version" }, { "date": "2022-01-12T08:49:15+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T17:49:40+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.6", "product": { "name": "Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.6::el8" } } }, { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.6", "product": { "name": "Red Hat OpenShift Container Platform 4.6", "product_id": "7Server-RH7-RHOSE-4.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.6::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "haproxy-0:2.0.16-4.el8.src", "product": { "name": "haproxy-0:2.0.16-4.el8.src", "product_id": "haproxy-0:2.0.16-4.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.0.16-4.el8?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "product": { "name": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "product_id": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.6.0-202112092023.p0.g845f228.assembly.stream.el8?arch=src" } } }, { "category": "product_version", "name": "haproxy-0:2.0.16-2.el7.src", "product": { "name": "haproxy-0:2.0.16-2.el7.src", "product_id": "haproxy-0:2.0.16-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy@2.0.16-2.el7?arch=src" } } }, { "category": "product_version", "name": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "product": { "name": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "product_id": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift@4.6.0-202112092023.p0.g845f228.assembly.stream.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "haproxy20-0:2.0.16-4.el8.x86_64", "product": { "name": "haproxy20-0:2.0.16-4.el8.x86_64", "product_id": "haproxy20-0:2.0.16-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.16-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.16-4.el8.x86_64", "product": { "name": "haproxy-debugsource-0:2.0.16-4.el8.x86_64", "product_id": "haproxy-debugsource-0:2.0.16-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.16-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.16-4.el8.x86_64", "product": { "name": "haproxy20-debuginfo-0:2.0.16-4.el8.x86_64", "product_id": "haproxy20-debuginfo-0:2.0.16-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.16-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64", "product": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64", "product_id": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.6.0-202112092023.p0.g845f228.assembly.stream.el8?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy20-0:2.0.16-2.el7.x86_64", "product": { "name": "haproxy20-0:2.0.16-2.el7.x86_64", "product_id": "haproxy20-0:2.0.16-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.16-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "product": { "name": "haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "product_id": "haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debuginfo@2.0.16-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "product": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "product_id": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.6.0-202112092023.p0.g845f228.assembly.stream.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "haproxy20-0:2.0.16-4.el8.ppc64le", "product": { "name": "haproxy20-0:2.0.16-4.el8.ppc64le", "product_id": "haproxy20-0:2.0.16-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.16-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "product": { "name": "haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "product_id": "haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.16-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "product": { "name": "haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "product_id": "haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.16-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "product": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "product_id": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.6.0-202112092023.p0.g845f228.assembly.stream.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "haproxy20-0:2.0.16-4.el8.s390x", "product": { "name": "haproxy20-0:2.0.16-4.el8.s390x", "product_id": "haproxy20-0:2.0.16-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20@2.0.16-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy-debugsource-0:2.0.16-4.el8.s390x", "product": { "name": "haproxy-debugsource-0:2.0.16-4.el8.s390x", "product_id": "haproxy-debugsource-0:2.0.16-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy-debugsource@2.0.16-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "product": { "name": "haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "product_id": "haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/haproxy20-debuginfo@2.0.16-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "product": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "product_id": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-hyperkube@4.6.0-202112092023.p0.g845f228.assembly.stream.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.0.16-2.el7.src as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src" }, "product_reference": "haproxy-0:2.0.16-2.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debuginfo-0:2.0.16-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64" }, "product_reference": "haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.16-2.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64" }, "product_reference": "haproxy20-0:2.0.16-2.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "7Server-RH7-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src" }, "product_reference": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "7Server-RH7-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64" }, "product_reference": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-0:2.0.16-4.el8.src as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src" }, "product_reference": "haproxy-0:2.0.16-4.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.16-4.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le" }, "product_reference": "haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.16-4.el8.s390x as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x" }, "product_reference": "haproxy-debugsource-0:2.0.16-4.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy-debugsource-0:2.0.16-4.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64" }, "product_reference": "haproxy-debugsource-0:2.0.16-4.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.16-4.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le" }, "product_reference": "haproxy20-0:2.0.16-4.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.16-4.el8.s390x as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x" }, "product_reference": "haproxy20-0:2.0.16-4.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-0:2.0.16-4.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64" }, "product_reference": "haproxy20-0:2.0.16-4.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le" }, "product_reference": "haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.16-4.el8.s390x as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x" }, "product_reference": "haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "haproxy20-debuginfo-0:2.0.16-4.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" }, "product_reference": "haproxy20-debuginfo-0:2.0.16-4.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src" }, "product_reference": "openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le" }, "product_reference": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x" }, "product_reference": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "relates_to_product_reference": "8Base-RHOSE-4.6" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.6", "product_id": "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64" }, "product_reference": "openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64", "relates_to_product_reference": "8Base-RHOSE-4.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-39241", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-08-17T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "8Base-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995107" } ], "notes": [ { "category": "description", "text": "haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected resource. The highest threat from this vulnerability is possible confidentiality concerns.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "8Base-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-39241" }, { "category": "external", "summary": "RHBZ#1995107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995107" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39241", "url": "https://www.cve.org/CVERecord?id=CVE-2021-39241" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39241" } ], "release_date": "2021-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-12T08:49:15+00:00", "details": "For OpenShift Container Platform 4.6 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:0024" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: an HTTP method name may contain a space followed by the name of a protected resource" }, { "cve": "CVE-2021-40346", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2021-08-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-RH7-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "8Base-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2000599" } ], "notes": [ { "category": "description", "text": "Proxy server haproxy has a flaw that can could allow an HTTP request smuggling attack with the goal of bypassing access-control list rules defined by haproxy. The attack was made possible by utilizing an integer overflow vulnerability that allowed reaching an unexpected state in haproxy while parsing an HTTP request. The highest threat from this vulnerability is integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "haproxy: request smuggling attack or response splitting via duplicate content-length header", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" ], "known_not_affected": [ "7Server-RH7-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "8Base-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-40346" }, { "category": "external", "summary": "RHBZ#2000599", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2000599" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40346", "url": "https://www.cve.org/CVERecord?id=CVE-2021-40346" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346" }, { "category": "external", "summary": "https://www.haproxy.org/download/2.4/src/CHANGELOG", "url": "https://www.haproxy.org/download/2.4/src/CHANGELOG" } ], "release_date": "2021-09-08T17:37:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-01-12T08:49:15+00:00", "details": "For OpenShift Container Platform 4.6 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html", "product_ids": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:0024" }, { "category": "workaround", "details": "To mitigate this problem the following can be added to proxy config:\n\nhttp-request deny if { req.hdr_cnt(content-length) gt 1 }\nhttp-response deny if { res.hdr_cnt(content-length) gt 1 }", "product_ids": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.src", "7Server-RH7-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:openshift-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.src", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.ppc64le", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.s390x", "8Base-RHOSE-4.6:openshift-hyperkube-0:4.6.0-202112092023.p0.g845f228.assembly.stream.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RH7-RHOSE-4.6:haproxy-0:2.0.16-2.el7.src", "7Server-RH7-RHOSE-4.6:haproxy-debuginfo-0:2.0.16-2.el7.x86_64", "7Server-RH7-RHOSE-4.6:haproxy20-0:2.0.16-2.el7.x86_64", "8Base-RHOSE-4.6:haproxy-0:2.0.16-4.el8.src", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy-debugsource-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-0:2.0.16-4.el8.x86_64", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.ppc64le", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.s390x", "8Base-RHOSE-4.6:haproxy20-debuginfo-0:2.0.16-4.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "haproxy: request smuggling attack or response splitting via duplicate content-length header" } ] }
gsd-2021-40346
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2021-40346", "description": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.", "id": "GSD-2021-40346", "references": [ "https://www.suse.com/security/cve/CVE-2021-40346.html", "https://www.debian.org/security/2021/dsa-4968", "https://access.redhat.com/errata/RHSA-2022:0114", "https://access.redhat.com/errata/RHSA-2022:0024", "https://access.redhat.com/errata/RHSA-2021:5208", "https://access.redhat.com/errata/RHSA-2021:4118", "https://ubuntu.com/security/CVE-2021-40346", "https://security.archlinux.org/CVE-2021-40346" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2021-40346" ], "details": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.", "id": "GSD-2021-40346", "modified": "2023-12-13T01:23:25.794604Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-40346", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.mail-archive.com/haproxy@formilux.org", "refsource": "MISC", "url": "https://www.mail-archive.com/haproxy@formilux.org" }, { "name": "https://git.haproxy.org/?p=haproxy.git", "refsource": "MISC", "url": "https://git.haproxy.org/?p=haproxy.git" }, { "name": "DSA-4968", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2021/dsa-4968" }, { "name": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html", "refsource": "MISC", "url": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html" }, { "name": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/", "refsource": "MISC", "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/" }, { "name": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95", "refsource": "MISC", "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "name": "[cloudstack-dev] 20210910 CVE-2021-40346 (haproxy 2.x)", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120@%3Cdev.cloudstack.apache.org%3E" }, { "name": "[cloudstack-dev] 20210910 Re: CVE-2021-40346 (haproxy 2.x)", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a@%3Cdev.cloudstack.apache.org%3E" }, { "name": "FEDORA-2021-3493f9f6ab", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/" }, { "name": "FEDORA-2021-cd5ee418f6", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.0.25", "versionStartIncluding": "2.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.2.17", "versionStartIncluding": "2.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.3.14", "versionStartIncluding": "2.3.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.4.4", "versionStartIncluding": "2.4.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev0:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev4:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev5:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:haproxy:haproxy:2.5:dev6:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-40346" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-190" } ] } ] }, "references": { "reference_data": [ { "name": "https://git.haproxy.org/?p=haproxy.git", "refsource": "MISC", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://git.haproxy.org/?p=haproxy.git" }, { "name": "DSA-4968", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2021/dsa-4968" }, { "name": "https://www.mail-archive.com/haproxy@formilux.org", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://www.mail-archive.com/haproxy@formilux.org" }, { "name": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html", "refsource": "MISC", "tags": [ "Mitigation", "Third Party Advisory" ], "url": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html" }, { "name": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/", "refsource": "MISC", "tags": [ "Exploit", "Mitigation", "Third Party Advisory" ], "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/" }, { "name": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95", "refsource": "MISC", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "name": "[cloudstack-dev] 20210910 CVE-2021-40346 (haproxy 2.x)", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120@%3Cdev.cloudstack.apache.org%3E" }, { "name": "[cloudstack-dev] 20210910 Re: CVE-2021-40346 (haproxy 2.x)", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a@%3Cdev.cloudstack.apache.org%3E" }, { "name": "FEDORA-2021-3493f9f6ab", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO/" }, { "name": "FEDORA-2021-cd5ee418f6", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN/" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2021-12-02T20:43Z", "publishedDate": "2021-09-08T17:15Z" } } }
wid-sec-w-2023-2456
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Red Hat OpenShift ist eine \"Platform as a Service\" (PaaS) L\u00f6sung zur Bereitstellung von Applikationen in der Cloud.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2456 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-2456.json" }, { "category": "self", "summary": "WID-SEC-2023-2456 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2456" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASHAPROXY2-2023-005 vom 2023-09-27", "url": "https://alas.aws.amazon.com/AL2/ALASHAPROXY2-2023-005.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:4118 vom 2021-11-10", "url": "https://access.redhat.com/errata/RHSA-2021:4118" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:5002 vom 2021-12-13", "url": "https://access.redhat.com/errata/RHSA-2021:5002" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:5208 vom 2022-01-05", "url": "https://access.redhat.com/errata/RHSA-2021:5208" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0026 vom 2022-01-13", "url": "https://access.redhat.com/errata/RHSA-2022:0026" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0024 vom 2022-01-13", "url": "https://access.redhat.com/errata/RHSA-2022:0024" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0114 vom 2022-01-19", "url": "https://access.redhat.com/errata/RHSA-2022:0114" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2022:0856 vom 2022-03-14", "url": "https://access.redhat.com/errata/RHSA-2022:0856" } ], "source_lang": "en-US", "title": "Red Hat OpenShift: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-09-27T22:00:00.000+00:00", "generator": { "date": "2024-08-15T17:58:53.739+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-2456", "initial_release_date": "2021-11-10T23:00:00.000+00:00", "revision_history": [ { "date": "2021-11-10T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2021-12-13T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-01-05T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-01-12T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-01-19T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2022-03-14T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-09-27T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Amazon aufgenommen" } ], "status": "final", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "category": "product_name", "name": "Red Hat OpenShift \u003c 4.9.6", "product": { "name": "Red Hat OpenShift \u003c 4.9.6", "product_id": "T021006", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.9.6" } } } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-39240", "notes": [ { "category": "description", "text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Die Schwachstellen bestehen in der Komponente \"haproxy\" und sind auf Fehler bei der Verarbeitung von HTTP-Anfragen, HTTP-Request-Smuggling sowie Fehler bei einer Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen." } ], "product_status": { "known_affected": [ "67646", "398363" ] }, "release_date": "2021-11-10T23:00:00.000+00:00", "title": "CVE-2021-39240" }, { "cve": "CVE-2021-39241", "notes": [ { "category": "description", "text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Die Schwachstellen bestehen in der Komponente \"haproxy\" und sind auf Fehler bei der Verarbeitung von HTTP-Anfragen, HTTP-Request-Smuggling sowie Fehler bei einer Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen." } ], "product_status": { "known_affected": [ "67646", "398363" ] }, "release_date": "2021-11-10T23:00:00.000+00:00", "title": "CVE-2021-39241" }, { "cve": "CVE-2021-39242", "notes": [ { "category": "description", "text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Die Schwachstellen bestehen in der Komponente \"haproxy\" und sind auf Fehler bei der Verarbeitung von HTTP-Anfragen, HTTP-Request-Smuggling sowie Fehler bei einer Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen." } ], "product_status": { "known_affected": [ "67646", "398363" ] }, "release_date": "2021-11-10T23:00:00.000+00:00", "title": "CVE-2021-39242" }, { "cve": "CVE-2021-40346", "notes": [ { "category": "description", "text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Die Schwachstellen bestehen in der Komponente \"haproxy\" und sind auf Fehler bei der Verarbeitung von HTTP-Anfragen, HTTP-Request-Smuggling sowie Fehler bei einer Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren oder Informationen offenzulegen." } ], "product_status": { "known_affected": [ "67646", "398363" ] }, "release_date": "2021-11-10T23:00:00.000+00:00", "title": "CVE-2021-40346" } ] }
var-202109-1900
Vulnerability from variot
An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs. HAProxy Exists in an integer overflow vulnerability.Information may be tampered with. HAProxy is an open source TCP/HTTP load balancing server from the French HAProxy= company. =
There is an input validation error vulnerability in HAProxy, which stems from the lack of header name length checking in the htx_add_header() and htx_add_trailer() functions in HAProxy, which can be exploited by attackers to cause request smuggling attacks or response splitting attacks. Description:
Red Hat Advanced Cluster Management for Kubernetes 2.2.11 images
Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments.
Clusters and applications are all visible and managed from a single console — with security policy built in. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release:
https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/
Security updates:
-
object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 (CVE-2021-23434)
-
follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor (CVE-2022-0155)
Related bugs:
-
RHACM 2.2.11 images (Bugzilla #2029508)
-
ClusterImageSet has 4.5 which is not supported in ACM 2.2.10 (Bugzilla
2030859)
- Bugs fixed (https://bugzilla.redhat.com/):
1999810 - CVE-2021-23434 object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 2029508 - RHACM 2.2.11 images 2030859 - ClusterImageSet has 4.5 which is not supported in ACM 2.2.10 2044556 - CVE-2022-0155 follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Debian Security Advisory DSA-4968-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 07, 2021 https://www.debian.org/security/faq
Package : haproxy CVE ID : CVE-2021-40346
Ori Hollander reported that missing header name length checks in the htx_add_header() and htx_add_trailer() functions in HAProxy, a fast and reliable load balancing reverse proxy, could result in request smuggling attacks or response splitting attacks.
Additionally this update addresses #993303 introduced in DSA 4960-1 causing HAProxy to fail serving URLs with HTTP/2 containing '//'.
For the stable distribution (bullseye), this problem has been fixed in version 2.2.9-2+deb11u2.
We recommend that you upgrade your haproxy packages.
For the detailed security status of haproxy please refer to its security tracker page at: https://security-tracker.debian.org/tracker/haproxy
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmE30edfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QPzQ//Xl1VpOHuAwqodHnEx3DSP172eZ6lD3Mdrs+GXscbkCXTMHduSXGnSGA3 N1IrN8Wt1bfvxybqdR3CLTehTzmgBJLGEz8Ub5gu0IJ2o1edyiqpZBDhZvDSCPFC iFHWucZ2asOb9c/rCapTi7AD+S7NpC5AnIGfNhUHYWnFwR7Id8gHvd9JaHUGrInh P4T5lzY70fvNFPrSye7CQFPcSScHOe29i7igKXZmV+FxvnYEYJyavf6ijwGTJF87 e1lJAm8er9bQZp3GLzkbI3bRUDmO+IgGX+H3Qz/PxbU23PhyDN91QVWCY/CX11nN yH4evBchPM1ap2o8hPZYpUYUznYekOA1CfYxTcuP5oc9QFMEzHMNUVhSihsjGA4Y fCxFmdhcQzTLI7GcZTkSB2k0CikF4ncH7aqtM7oK2z/CM/uJeVO1WzRtvyJKuD72 Lv6PwQ/AbMa/dKYzROyQE0vDzRd23UzlQzg1npbpHlfPYXOgyfIRLCIfBPatyGrR snpdsNnGejesNmsbxCBwQGz2jsrgSqMe1qkho9ebK3aeaSA1lRe+WXV87NYH2wZi JOQH9JjqXCwkH/JDoOBWasOAhyKPs4jv1JT2L2iXCNVbFcgklnc+iaUgafYV9tob QMoc5oZREvgkpu+TOOTOBmrOw4sDfEOgcNf3G1sBBFKS4ds5wv0= =8IRe -----END PGP SIGNATURE----- . Bugs fixed (https://bugzilla.redhat.com/):
2050826 - CVE-2022-24348 gitops: Path traversal and dereference of symlinks when passing Helm value files
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
===================================================================== Red Hat Security Advisory
Synopsis: Moderate: OpenShift Container Platform 4.9.6 packages and security update Advisory ID: RHSA-2021:4118-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2021:4118 Issue date: 2021-11-10 CVE Names: CVE-2021-39240 CVE-2021-39241 CVE-2021-39242 CVE-2021-40346 =====================================================================
- Summary:
Red Hat OpenShift Container Platform release 4.9.6 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat OpenShift Container Platform 4.9 - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.9.6. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2021:4119
Security Fix(es):
- haproxy: does not ensure that the scheme and path portions of a URI have the expected characters (CVE-2021-39240)
- haproxy: an HTTP method name may contain a space followed by the name of a protected resource (CVE-2021-39241)
- haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled (CVE-2021-39242)
- haproxy: request smuggling attack or response splitting via duplicate content-length header (CVE-2021-40346)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.9 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster - -between-minor.html#understanding-upgrade-channels_updating-cluster-between - -minor
- Solution:
For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-rel ease-notes.html
Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster - -cli.html
- Bugs fixed (https://bugzilla.redhat.com/):
1995104 - CVE-2021-39240 haproxy: does not ensure that the scheme and path portions of a URI have the expected characters 1995107 - CVE-2021-39241 haproxy: an HTTP method name may contain a space followed by the name of a protected resource 1995112 - CVE-2021-39242 haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled 2000599 - CVE-2021-40346 haproxy: request smuggling attack or response splitting via duplicate content-length header
- Package List:
Red Hat OpenShift Container Platform 4.9:
Source: cri-o-1.22.0-91.rhaos4.9.gitd745cab.el7.src.rpm openshift-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src.rpm
x86_64: cri-o-1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64.rpm cri-o-debuginfo-1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64.rpm openshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64.rpm
Red Hat OpenShift Container Platform 4.9:
Source: cri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.src.rpm haproxy-2.2.15-2.el8.src.rpm openshift-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src.rpm openshift-kuryr-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src.rpm openstack-ironic-18.1.1-0.20211019162143.e0437cd.el8.src.rpm
aarch64: cri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64.rpm cri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64.rpm cri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64.rpm haproxy-debugsource-2.2.15-2.el8.aarch64.rpm openshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64.rpm
noarch: openshift-kuryr-cni-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm openshift-kuryr-common-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm openshift-kuryr-controller-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm openstack-ironic-api-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm openstack-ironic-common-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm openstack-ironic-conductor-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm python3-ironic-tests-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm python3-kuryr-kubernetes-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm
ppc64le: cri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le.rpm cri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le.rpm cri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le.rpm haproxy-debugsource-2.2.15-2.el8.ppc64le.rpm openshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le.rpm
s390x: cri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.s390x.rpm cri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.s390x.rpm cri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.s390x.rpm haproxy-debugsource-2.2.15-2.el8.s390x.rpm openshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x.rpm
x86_64: cri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64.rpm cri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64.rpm cri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64.rpm haproxy-debugsource-2.2.15-2.el8.x86_64.rpm openshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2021-39240 https://access.redhat.com/security/cve/CVE-2021-39241 https://access.redhat.com/security/cve/CVE-2021-39242 https://access.redhat.com/security/cve/CVE-2021-40346 https://access.redhat.com/security/updates/classification/#moderate
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBYYx8gNzjgjWX9erEAQjjTg/5AXMVm45fYdpV7EOawTw6ADN3G+MIC9F+ 4/Yi3cEdClLzvColFg9mR8Ha/HrtSc8hl/ImYCdWpdaAgR69Z2ReFYR8skd6IQlg 2yqP8Fv34dXLxMkTgFpf2P4xsVdvAaKW5LXuZZ8tNYIRmCFmDJLbO1lyAAb0f7Tg cYFQE5LsuBSFceuY405VYjdwrAR1N/EwzleqpTrgcdeGliwRnfpiOjTs9rXgIIkf EFccGSIJpvlsibKm78o8PVxpoKmwRPnIUU/lOlLEsx4epYEal332i/JOhctXQ0MD KIPy0Ghto00KDyBfp1JziS3by4TD3DPYoZ2LqlmN844BUc4de7h/48gwy8n3PK7g A+0sguS3K4lTrb0INV6f3fPBsULZSAAhuPMkpAf0YgfnLdJlkm+oXBWDyiERZyaX lcQREEMJoKWnw5s83ip+o+QQdisxQ5olqEMD6g0qT9msUvgha4OIEgnN1dYgFvEK IY3zgShDHQGg2LwAXku1pvEB+N5MedDM/4OWV7qhFUN1edlTePGqN8tIE/bgEpib 464s1Q3FMcTwQDOmKpTh5GTt8TKkuNIibfHFqqwEJ/L/1L77qDjtp4EapFm0USxq 0R/bVd733gsEXghAv1NRBHQECb727Fne6cNLu+TffFQbtfSel+0MGogsSURVhy7e 7lkzoAA4Wc4= =r4tE -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . Bugs fixed (https://bugzilla.redhat.com/):
2034067 - CVE-2021-45105 log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
5
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202109-1900", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "haproxy", "scope": "gte", "trust": 1.0, "vendor": "haproxy", "version": "2.3.0" }, { "model": "fedora", "scope": "eq", "trust": 1.0, "vendor": "fedoraproject", "version": "33" }, { "model": "fedora", "scope": "eq", "trust": 1.0, "vendor": "fedoraproject", "version": "34" }, { "model": "haproxy", "scope": "gte", "trust": 1.0, "vendor": "haproxy", "version": "2.4.0" }, { "model": "haproxy", "scope": "gte", "trust": 1.0, "vendor": "haproxy", "version": "2.0.0" }, { "model": "haproxy", "scope": "eq", "trust": 1.0, "vendor": "haproxy", "version": "2.5" }, { "model": "haproxy", "scope": "lt", "trust": 1.0, "vendor": "haproxy", "version": "2.3.14" }, { "model": "haproxy", "scope": "gte", "trust": 1.0, "vendor": "haproxy", "version": "2.2.0" }, { "model": "haproxy", "scope": "lt", "trust": 1.0, "vendor": "haproxy", "version": "2.2.17" }, { "model": "haproxy", "scope": "lt", "trust": 1.0, "vendor": "haproxy", "version": "2.0.25" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "11.0" }, { "model": "haproxy", "scope": "lt", "trust": 1.0, "vendor": "haproxy", "version": "2.4.4" }, { "model": "gnu/linux", "scope": null, "trust": 0.8, "vendor": "debian", "version": null }, { "model": "haproxy", "scope": null, "trust": 0.8, "vendor": "willy tarreau", "version": null }, { "model": "fedora", "scope": null, "trust": 0.8, "vendor": "fedora", "version": null }, { "model": "haproxy", "scope": "gte", "trust": 0.6, "vendor": "haproxy", "version": "2.0,\u003c=2.5" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "NVD", "id": "CVE-2021-40346" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Red Hat", "sources": [ { "db": "PACKETSTORM", "id": "166309" }, { "db": "PACKETSTORM", "id": "165481" }, { "db": "PACKETSTORM", "id": "166051" }, { "db": "PACKETSTORM", "id": "164940" }, { "db": "PACKETSTORM", "id": "165552" } ], "trust": 0.5 }, "cve": "CVE-2021-40346", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CVE-2021-40346", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 1.9, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CNVD-2022-05867", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "CVE-2021-40346", "impactScore": 3.6, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "None", "baseScore": 7.5, "baseSeverity": "High", "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2021-40346", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2021-40346", "trust": 1.0, "value": "HIGH" }, { "author": "NVD", "id": "CVE-2021-40346", "trust": 0.8, "value": "High" }, { "author": "CNVD", "id": "CNVD-2022-05867", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-202109-365", "trust": 0.6, "value": "HIGH" }, { "author": "VULMON", "id": "CVE-2021-40346", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "VULMON", "id": "CVE-2021-40346" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "CNNVD", "id": "CNNVD-202109-365" }, { "db": "NVD", "id": "CVE-2021-40346" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs. HAProxy Exists in an integer overflow vulnerability.Information may be tampered with. HAProxy is an open source TCP/HTTP load balancing server from the French HAProxy= company. =\n\r\n\r\nThere is an input validation error vulnerability in HAProxy, which stems from the lack of header name length checking in the htx_add_header() and htx_add_trailer() functions in HAProxy, which can be exploited by attackers to cause request smuggling attacks or response splitting attacks. Description:\n\nRed Hat Advanced Cluster Management for Kubernetes 2.2.11 images\n\nRed Hat Advanced Cluster Management for Kubernetes provides the\ncapabilities to address common challenges that administrators and site\nreliability engineers face as they work across a range of public and\nprivate cloud environments. \n\nClusters and applications are all visible and managed from a single console\n\u2014 with security policy built in. See the following Release Notes documentation, which\nwill be updated shortly for this release, for additional details about this\nrelease:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/\n\nSecurity updates:\n\n* object-path: Type confusion vulnerability can lead to a bypass of\nCVE-2020-15256 (CVE-2021-23434)\n\n* follow-redirects: Exposure of Private Personal Information to an\nUnauthorized Actor (CVE-2022-0155)\n\nRelated bugs: \n\n* RHACM 2.2.11 images (Bugzilla #2029508)\n\n* ClusterImageSet has 4.5 which is not supported in ACM 2.2.10 (Bugzilla\n#2030859)\n\n3. Bugs fixed (https://bugzilla.redhat.com/):\n\n1999810 - CVE-2021-23434 object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256\n2029508 - RHACM 2.2.11 images\n2030859 - ClusterImageSet has 4.5 which is not supported in ACM 2.2.10\n2044556 - CVE-2022-0155 follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor\n\n5. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-4968-1 security@debian.org\nhttps://www.debian.org/security/ Salvatore Bonaccorso\nSeptember 07, 2021 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : haproxy\nCVE ID : CVE-2021-40346\n\nOri Hollander reported that missing header name length checks in the\nhtx_add_header() and htx_add_trailer() functions in HAProxy, a fast and\nreliable load balancing reverse proxy, could result in request smuggling\nattacks or response splitting attacks. \n\nAdditionally this update addresses #993303 introduced in DSA 4960-1\ncausing HAProxy to fail serving URLs with HTTP/2 containing \u0027//\u0027. \n\nFor the stable distribution (bullseye), this problem has been fixed in\nversion 2.2.9-2+deb11u2. \n\nWe recommend that you upgrade your haproxy packages. \n\nFor the detailed security status of haproxy please refer to its security\ntracker page at:\nhttps://security-tracker.debian.org/tracker/haproxy\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n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\nQMoc5oZREvgkpu+TOOTOBmrOw4sDfEOgcNf3G1sBBFKS4ds5wv0=\n=8IRe\n-----END PGP SIGNATURE-----\n. Bugs fixed (https://bugzilla.redhat.com/):\n\n2050826 - CVE-2022-24348 gitops: Path traversal and dereference of symlinks when passing Helm value files\n\n5. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Moderate: OpenShift Container Platform 4.9.6 packages and security update\nAdvisory ID: RHSA-2021:4118-01\nProduct: Red Hat OpenShift Enterprise\nAdvisory URL: https://access.redhat.com/errata/RHSA-2021:4118\nIssue date: 2021-11-10\nCVE Names: CVE-2021-39240 CVE-2021-39241 CVE-2021-39242 \n CVE-2021-40346 \n=====================================================================\n\n1. Summary:\n\nRed Hat OpenShift Container Platform release 4.9.6 is now available with\nupdates to packages and images that fix several bugs and add enhancements. \n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.9. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat OpenShift Container Platform 4.9 - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. Description:\n\nRed Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments. \n\nThis advisory contains the RPM packages for Red Hat OpenShift Container\nPlatform 4.9.6. See the following advisory for the container images for\nthis release:\n\nhttps://access.redhat.com/errata/RHBA-2021:4119\n\nSecurity Fix(es):\n\n* haproxy: does not ensure that the scheme and path portions of a URI have\nthe expected characters (CVE-2021-39240)\n* haproxy: an HTTP method name may contain a space followed by the name of\na protected resource (CVE-2021-39241)\n* haproxy: it can lead to a situation with an attacker-controlled HTTP Host\nheader because a mismatch between Host and authority is mishandled\n(CVE-2021-39242)\n* haproxy: request smuggling attack or response splitting via duplicate\ncontent-length header (CVE-2021-40346)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nAll OpenShift Container Platform 4.9 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift Console\nor the CLI oc command. Instructions for upgrading a cluster are available\nat\nhttps://docs.openshift.com/container-platform/4.9/updating/updating-cluster\n- -between-minor.html#understanding-upgrade-channels_updating-cluster-between\n- -minor\n\n4. Solution:\n\nFor OpenShift Container Platform 4.9 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-rel\nease-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.9/updating/updating-cluster\n- -cli.html\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1995104 - CVE-2021-39240 haproxy: does not ensure that the scheme and path portions of a URI have the expected characters\n1995107 - CVE-2021-39241 haproxy: an HTTP method name may contain a space followed by the name of a protected resource\n1995112 - CVE-2021-39242 haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled\n2000599 - CVE-2021-40346 haproxy: request smuggling attack or response splitting via duplicate content-length header\n\n6. Package List:\n\nRed Hat OpenShift Container Platform 4.9:\n\nSource:\ncri-o-1.22.0-91.rhaos4.9.gitd745cab.el7.src.rpm\nopenshift-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.src.rpm\n\nx86_64:\ncri-o-1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64.rpm\ncri-o-debuginfo-1.22.0-91.rhaos4.9.gitd745cab.el7.x86_64.rpm\nopenshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el7.x86_64.rpm\n\nRed Hat OpenShift Container Platform 4.9:\n\nSource:\ncri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.src.rpm\nhaproxy-2.2.15-2.el8.src.rpm\nopenshift-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.src.rpm\nopenshift-kuryr-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.src.rpm\nopenstack-ironic-18.1.1-0.20211019162143.e0437cd.el8.src.rpm\n\naarch64:\ncri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64.rpm\ncri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64.rpm\ncri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.aarch64.rpm\nhaproxy-debugsource-2.2.15-2.el8.aarch64.rpm\nopenshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.aarch64.rpm\n\nnoarch:\nopenshift-kuryr-cni-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm\nopenshift-kuryr-common-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm\nopenshift-kuryr-controller-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm\nopenstack-ironic-api-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm\nopenstack-ironic-common-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm\nopenstack-ironic-conductor-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm\npython3-ironic-tests-18.1.1-0.20211019162143.e0437cd.el8.noarch.rpm\npython3-kuryr-kubernetes-4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8.noarch.rpm\n\nppc64le:\ncri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le.rpm\ncri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le.rpm\ncri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.ppc64le.rpm\nhaproxy-debugsource-2.2.15-2.el8.ppc64le.rpm\nopenshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.ppc64le.rpm\n\ns390x:\ncri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.s390x.rpm\ncri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.s390x.rpm\ncri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.s390x.rpm\nhaproxy-debugsource-2.2.15-2.el8.s390x.rpm\nopenshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.s390x.rpm\n\nx86_64:\ncri-o-1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64.rpm\ncri-o-debuginfo-1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64.rpm\ncri-o-debugsource-1.22.0-78.rhaos4.9.gitd745cab.el8.x86_64.rpm\nhaproxy-debugsource-2.2.15-2.el8.x86_64.rpm\nopenshift-hyperkube-4.9.0-202111020225.p0.git.d8c4430.assembly.stream.el8.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2021-39240\nhttps://access.redhat.com/security/cve/CVE-2021-39241\nhttps://access.redhat.com/security/cve/CVE-2021-39242\nhttps://access.redhat.com/security/cve/CVE-2021-40346\nhttps://access.redhat.com/security/updates/classification/#moderate\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2021 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\n7lkzoAA4Wc4=\n=r4tE\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. Bugs fixed (https://bugzilla.redhat.com/):\n\n2034067 - CVE-2021-45105 log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern\n\n5", "sources": [ { "db": "NVD", "id": "CVE-2021-40346" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "VULMON", "id": "CVE-2021-40346" }, { "db": "PACKETSTORM", "id": "166309" }, { "db": "PACKETSTORM", "id": "169123" }, { "db": "PACKETSTORM", "id": "165481" }, { "db": "PACKETSTORM", "id": "166051" }, { "db": "PACKETSTORM", "id": "164940" }, { "db": "PACKETSTORM", "id": "165552" } ], "trust": 2.79 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2021-40346", "trust": 4.5 }, { "db": "JVNDB", "id": "JVNDB-2021-011455", "trust": 0.8 }, { "db": "PACKETSTORM", "id": "165481", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "164940", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "165552", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2022-05867", "trust": 0.6 }, { "db": "PACKETSTORM", "id": "165624", "trust": 0.6 }, { "db": "PACKETSTORM", "id": "164079", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2021.3002", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2022.1071", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2021.3024", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2021.3853", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2021.3263", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2022.0716", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2022.0048", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2022.0175", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2022.0238", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2022011734", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2021111101", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2022011936", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2021090814", "trust": 0.6 }, { "db": "CS-HELP", "id": "SB2022010526", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-202109-365", "trust": 0.6 }, { "db": "VULMON", "id": "CVE-2021-40346", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "166309", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "169123", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "166051", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "VULMON", "id": "CVE-2021-40346" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "PACKETSTORM", "id": "166309" }, { "db": "PACKETSTORM", "id": "169123" }, { "db": "PACKETSTORM", "id": "165481" }, { "db": "PACKETSTORM", "id": "166051" }, { "db": "PACKETSTORM", "id": "164940" }, { "db": "PACKETSTORM", "id": "165552" }, { "db": "CNNVD", "id": "CNNVD-202109-365" }, { "db": "NVD", "id": "CVE-2021-40346" } ] }, "id": "VAR-202109-1900", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" } ], "trust": 0.06 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" } ] }, "last_update_date": "2024-11-29T19:25:45.719000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Messages\u00a0by\u00a0Thread", "trust": 0.8, "url": "https://www.debian.org/security/2021/dsa-4968" }, { "title": "Patch for HAProxy Input Validation Error Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/315566" }, { "title": "Haproxy HAProxy Enter the fix for the verification error vulnerability", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=162748" }, { "title": "Debian Security Advisories: DSA-4968-1 haproxy -- security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=5748f9c5d3808c8bcb9436e54096d270" }, { "title": "Red Hat: CVE-2021-40346", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=CVE-2021-40346" }, { "title": "Arch Linux Issues: ", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=CVE-2021-40346 log" }, { "title": "Amazon Linux 2: ALASHAPROXY2-2023-005", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=ALASHAPROXY2-2023-005" }, { "title": "Red Hat: Important: Red Hat OpenShift GitOps security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20220580 - Security Advisory" }, { "title": "Red Hat: Moderate: Red Hat Advanced Cluster Management 2.2.11 security updates and bug fixes", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=RHSA-20220856 - Security Advisory" }, { "title": "CVE-2021-40346", "trust": 0.1, "url": "https://github.com/knqyf263/CVE-2021-40346 " }, { "title": "CVE-2021-40346-POC", "trust": 0.1, "url": "https://github.com/donky16/CVE-2021-40346-POC " } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "VULMON", "id": "CVE-2021-40346" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "CNNVD", "id": "CNNVD-202109-365" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-190", "trust": 1.0 }, { "problemtype": "Integer overflow or wraparound (CWE-190) [NVD evaluation ]", "trust": 0.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "NVD", "id": "CVE-2021-40346" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-40346" }, { "trust": 1.6, "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "trust": 1.6, "url": "https://git.haproxy.org/?p=haproxy.git" }, { "trust": 1.6, "url": "https://www.debian.org/security/2021/dsa-4968" }, { "trust": 1.1, "url": "https://access.redhat.com/security/cve/cve-2021-40346" }, { "trust": 1.0, "url": "https://www.mail-archive.com/haproxy%40formilux.org" }, { "trust": 1.0, "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/" }, { "trust": 1.0, "url": "https://www.mail-archive.com/haproxy%40formilux.org/msg41114.html" }, { "trust": 1.0, "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120%40%3cdev.cloudstack.apache.org%3e" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/a7v2iyo22lwvbgunzwvkntmdv4kinlfo/" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/mxtsby2teaxwzvfqm3cxhjfronx7pemn/" }, { "trust": 1.0, "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a%40%3cdev.cloudstack.apache.org%3e" }, { "trust": 0.6, "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120@%3cdev.cloudstack.apache.org%3e" }, { "trust": 0.6, "url": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html" }, { "trust": 0.6, "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a@%3cdev.cloudstack.apache.org%3e" }, { "trust": 0.6, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/a7v2iyo22lwvbgunzwvkntmdv4kinlfo/" }, { "trust": 0.6, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/mxtsby2teaxwzvfqm3cxhjfronx7pemn/" }, { "trust": 0.6, "url": "http-smuggling/" }, { "trust": 0.6, "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2022.0048" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2021111101" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2022.0175" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/165624/red-hat-security-advisory-2022-0114-04.html" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2022011936" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2022.1071" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2021.3002" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2021.3024" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/164940/red-hat-security-advisory-2021-4118-01.html" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/165552/red-hat-security-advisory-2022-0026-06.html" }, { "trust": 0.6, "url": "https://vigilance.fr/vulnerability/haproxy-header-injection-via-htx-36327" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2021.3263" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2021.3853" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2022011734" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2021090814" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2022.0716" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/164079/ubuntu-security-notice-usn-5063-1.html" }, { "trust": 0.6, "url": "https://www.cybersecurity-help.cz/vdb/sb2022010526" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/165481/red-hat-security-advisory-2021-5208-05.html" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2022.0238" }, { "trust": 0.5, "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce" }, { "trust": 0.5, "url": "https://bugzilla.redhat.com/):" }, { "trust": 0.5, "url": "https://access.redhat.com/security/cve/cve-2021-39241" }, { "trust": 0.5, "url": "https://access.redhat.com/security/team/contact/" }, { "trust": 0.3, "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-39241" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-16135" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3200" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-5827" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-27645" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-27645" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-33574" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2020-13435" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-5827" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-28153" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2020-24370" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-13751" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-19603" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-35942" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-17594" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-24370" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3572" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2020-12762" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-36086" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-13750" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-13751" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-22898" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-12762" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2020-16135" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-36084" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17594" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3800" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-36087" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3712" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3445" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-13435" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-19603" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-20231" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-22925" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-18218" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-20232" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-20838" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-22876" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-20231" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2020-14155" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20838" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-22925" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-36085" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-33560" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-17595" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-42574" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14155" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-20232" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-28153" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-13750" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3426" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2019-18218" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3580" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17595" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-22898" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-3521" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-22876" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-39242" }, { "trust": 0.2, "url": "https://access.redhat.com/security/cve/cve-2021-39240" }, { "trust": 0.2, "url": "https://access.redhat.com/security/team/key/" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-39240" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-39242" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2020-0465" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-23434" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2022-0185" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2022-22942" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-0466" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-3564" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2020-25710" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-0920" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-4122" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-25710" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2020-0466" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-23434" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-4155" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2022-0330" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhsa-2022:0856" }, { "trust": 0.1, "url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/index" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-25214" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-25709" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-0465" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-3752" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2020-25709" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-4019" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-4192" }, { "trust": 0.1, "url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2022-0155" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-3984" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-3573" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-4193" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2022-24407" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-25214" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-0920" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-3872" }, { "trust": 0.1, "url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/" }, { "trust": 0.1, "url": "https://www.debian.org/security/faq" }, { "trust": 0.1, "url": "https://security-tracker.debian.org/tracker/haproxy" }, { "trust": 0.1, "url": "https://www.debian.org/security/" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhba-2021:5209" }, { "trust": 0.1, "url": "https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhsa-2021:5208" }, { "trust": 0.1, "url": "https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-43527" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhsa-2022:0580" }, { "trust": 0.1, "url": "https://access.redhat.com/articles/11258" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-33574" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-33560" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2020-14145" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2016-4658" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-37750" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-20271" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2022-24348" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-3200" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-20271" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-44790" }, { "trust": 0.1, "url": "https://access.redhat.com/security/updates/classification/#important" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2020-14145" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2016-4658" }, { "trust": 0.1, "url": "https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-rel" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhba-2021:4119" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhsa-2021:4118" }, { "trust": 0.1, "url": "https://docs.openshift.com/container-platform/4.9/updating/updating-cluster" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhba-2022:0025" }, { "trust": 0.1, "url": "https://access.redhat.com/security/updates/classification/#low" }, { "trust": 0.1, "url": "https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html" }, { "trust": 0.1, "url": "https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-45105" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhsa-2022:0026" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2021-45105" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "PACKETSTORM", "id": "166309" }, { "db": "PACKETSTORM", "id": "169123" }, { "db": "PACKETSTORM", "id": "165481" }, { "db": "PACKETSTORM", "id": "166051" }, { "db": "PACKETSTORM", "id": "164940" }, { "db": "PACKETSTORM", "id": "165552" }, { "db": "CNNVD", "id": "CNNVD-202109-365" }, { "db": "NVD", "id": "CVE-2021-40346" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2022-05867" }, { "db": "VULMON", "id": "CVE-2021-40346" }, { "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "db": "PACKETSTORM", "id": "166309" }, { "db": "PACKETSTORM", "id": "169123" }, { "db": "PACKETSTORM", "id": "165481" }, { "db": "PACKETSTORM", "id": "166051" }, { "db": "PACKETSTORM", "id": "164940" }, { "db": "PACKETSTORM", "id": "165552" }, { "db": "CNNVD", "id": "CNNVD-202109-365" }, { "db": "NVD", "id": "CVE-2021-40346" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2022-01-23T00:00:00", "db": "CNVD", "id": "CNVD-2022-05867" }, { "date": "2021-09-08T00:00:00", "db": "VULMON", "id": "CVE-2021-40346" }, { "date": "2022-08-01T00:00:00", "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "date": "2022-03-15T15:44:21", "db": "PACKETSTORM", "id": "166309" }, { "date": "2021-09-28T19:12:00", "db": "PACKETSTORM", "id": "169123" }, { "date": "2022-01-06T18:21:30", "db": "PACKETSTORM", "id": "165481" }, { "date": "2022-02-18T16:37:39", "db": "PACKETSTORM", "id": "166051" }, { "date": "2021-11-11T15:02:06", "db": "PACKETSTORM", "id": "164940" }, { "date": "2022-01-13T16:32:51", "db": "PACKETSTORM", "id": "165552" }, { "date": "2021-09-08T00:00:00", "db": "CNNVD", "id": "CNNVD-202109-365" }, { "date": "2021-09-08T17:15:12.457000", "db": "NVD", "id": "CVE-2021-40346" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2022-01-23T00:00:00", "db": "CNVD", "id": "CNVD-2022-05867" }, { "date": "2023-11-07T00:00:00", "db": "VULMON", "id": "CVE-2021-40346" }, { "date": "2022-08-01T07:55:00", "db": "JVNDB", "id": "JVNDB-2021-011455" }, { "date": "2022-03-15T00:00:00", "db": "CNNVD", "id": "CNNVD-202109-365" }, { "date": "2024-11-21T06:23:54.997000", "db": "NVD", "id": "CVE-2021-40346" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-202109-365" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "HAProxy\u00a0 Integer overflow vulnerability in", "sources": [ { "db": "JVNDB", "id": "JVNDB-2021-011455" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "input validation error", "sources": [ { "db": "CNNVD", "id": "CNNVD-202109-365" } ], "trust": 0.6 } }
ghsa-jwmg-q4wv-f75h
Vulnerability from github
An integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.
{ "affected": [], "aliases": [ "CVE-2021-40346" ], "database_specific": { "cwe_ids": [ "CWE-190" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-09-08T17:15:00Z", "severity": "HIGH" }, "details": "An integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.", "id": "GHSA-jwmg-q4wv-f75h", "modified": "2022-05-24T19:13:19Z", "published": "2022-05-24T19:13:19Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40346" }, { "type": "WEB", "url": "https://github.com/haproxy/haproxy/commit/3b69886f7dcc3cfb3d166309018e6cfec9ce2c95" }, { "type": "WEB", "url": "https://git.haproxy.org/?p=haproxy.git" }, { "type": "WEB", "url": "https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling" }, { "type": "WEB", "url": "https://lists.apache.org/thread.html/r284567dd7523f5823e2ce995f787ccd37b1cc4108779c50a97c79120@%3Cdev.cloudstack.apache.org%3E" }, { "type": "WEB", "url": "https://lists.apache.org/thread.html/r8a58fd7a29808e5d27ee56877745e58dc4bb041b9af94601554e2a5a@%3Cdev.cloudstack.apache.org%3E" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7V2IYO22LWVBGUNZWVKNTMDV4KINLFO" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXTSBY2TEAXWZVFQM3CXHJFRONX7PEMN" }, { "type": "WEB", "url": "https://www.debian.org/security/2021/dsa-4968" }, { "type": "WEB", "url": "https://www.mail-archive.com/haproxy@formilux.org" }, { "type": "WEB", "url": "https://www.mail-archive.com/haproxy@formilux.org/msg41114.html" } ], "schema_version": "1.4.0", "severity": [] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.