RHBA-2024:10967
Vulnerability from csaf_redhat - Published: 2024-12-17 11:31 - Updated: 2026-08-07 13:32Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.13.2 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.13.2 is now available with bug fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.13.2
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
7.8 (High)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.13.2 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.13.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2024:10967",
"url": "https://access.redhat.com/errata/RHBA-2024:10967"
},
{
"category": "external",
"summary": "PROJQUAY-6474",
"url": "https://issues.redhat.com/browse/PROJQUAY-6474"
},
{
"category": "external",
"summary": "PROJQUAY-7601",
"url": "https://issues.redhat.com/browse/PROJQUAY-7601"
},
{
"category": "external",
"summary": "PROJQUAY-8208",
"url": "https://issues.redhat.com/browse/PROJQUAY-8208"
},
{
"category": "external",
"summary": "PROJQUAY-8269",
"url": "https://issues.redhat.com/browse/PROJQUAY-8269"
},
{
"category": "external",
"summary": "PROJQUAY-8273",
"url": "https://issues.redhat.com/browse/PROJQUAY-8273"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_10967.json"
}
],
"title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.13.2 bug fix release",
"tracking": {
"current_release_date": "2026-08-07T13:32:11+00:00",
"generator": {
"date": "2026-08-07T13:32:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHBA-2024:10967",
"initial_release_date": "2024-12-17T11:31:51+00:00",
"revision_history": [
{
"date": "2024-12-17T11:31:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-12-17T11:31:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-07T13:32:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Quay v3",
"product": {
"name": "Quay v3",
"product_id": "8Base-Quay-3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"product_id": "quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.2-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"product": {
"name": "quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"product_id": "quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.2-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.2-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"product": {
"name": "quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"product_id": "quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"product_id": "quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"product": {
"name": "quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"product_id": "quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.2-10"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"product": {
"name": "quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"product_id": "quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"product": {
"name": "quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"product_id": "quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.2-11"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"product_id": "quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.2-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"product": {
"name": "quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"product_id": "quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.2-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.2-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"product": {
"name": "quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"product_id": "quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"product_id": "quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"product": {
"name": "quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"product_id": "quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.2-10"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"product": {
"name": "quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"product_id": "quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64",
"product": {
"name": "quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64",
"product_id": "quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.2-11"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"product_id": "quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.13.2-2"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"product": {
"name": "quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"product_id": "quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.13.2-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.13.2-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"product": {
"name": "quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"product_id": "quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"product_id": "quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"product": {
"name": "quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"product_id": "quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.13.2-10"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"product": {
"name": "quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"product_id": "quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.13.2-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"product": {
"name": "quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"product_id": "quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.13.2-11"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le"
},
"product_reference": "quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64"
},
"product_reference": "quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x"
},
"product_reference": "quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64"
},
"product_reference": "quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x"
},
"product_reference": "quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le"
},
"product_reference": "quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le"
},
"product_reference": "quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64"
},
"product_reference": "quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x"
},
"product_reference": "quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x"
},
"product_reference": "quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64"
},
"product_reference": "quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le"
},
"product_reference": "quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x"
},
"product_reference": "quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le"
},
"product_reference": "quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64"
},
"product_reference": "quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64",
"relates_to_product_reference": "8Base-Quay-3"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Erik Sj\u00f6lund"
],
"organization": "Upstream"
}
],
"cve": "CVE-2024-9675",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2024-10-09T02:45:06.343000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2317458"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "buildah: Buildah allows arbitrary directory mount",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-9675"
},
{
"category": "external",
"summary": "RHBZ#2317458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-9675",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9675"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-9675",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9675"
}
],
"release_date": "2024-10-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-17T11:31:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:10967"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:283acff8fa11043c8728621fd537e03145dd1d525372238504afba5450c2a676_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:6dd094a7988a11e7965297fc5866f25465438ecda5dfb08cc924b312e391a1bf_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:a71bbc6a838397007aace636b2fa2112a0739121f4372d8494ad5c032a36bd46_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:2e007d0eeeac58b9256301a8c226ed3ec0cd5eee12cc7f09d9521b1cffac25b6_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:91716c4d898aa387d7228b6d0c3844065dd4fd2b30c3a657a30b4b38ca7c1909_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:fbebe36d4a0f5a81832dfbd910ea9e73ec66e8864f89a50cff18f9af8e2b70ac_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:21a4ca80f010ad667f6bf41b74ec0a0c0ab83dd1cfb0dad695c5d9e2907658f8_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:566cefe241071578d7159542c8a585dd46580711f5f72c7ac843a1627ae36f82_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:d91aef6df657c610c0de286e5a83f0a3c425661129e99c20c102977b27f180ef_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:2bd2bf64a0b396b2603771afb659e4f30ba6de6e6b0f5c2263d26ee024ff4588_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:3d91e8acc101f71b804c883daf072f1bc0b6c89e9c2b485c41e70a72c8aaeb7b_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:688898286cc11ec2e2b8be498576df5137dc640910f7c611809f93f6466135a3_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8190b5c673b7969953e356b4722c6aa43b0775bd1aec91908260f554cccc033b_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:c8ba63fa1a07b65cc72efd498573164c236109116af9dec4b49eb17fd30ce84c_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:f0d382b21ff912cc8440da90f3121db140080e10ebc8d611fb7f400d7d9c580e_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:7b21a13f92063b64adecfd3c6d86c6bcb72ccf399038ea323cb2fe70e2169d95_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d302e8f889b3672afd895566bbd4a064718028793451dce32122c7c5f33e608c_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e5215c310e253ccf574c1cdd6cf019b7845efc471908f47f345468d3b1f31d8e_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09487f3167985192e6b06f0798d2b507024eae284f31b29f4de3ae3e1b9ee806_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:09bc7747228f7eb1b333db9db5ab9b975c8bbcac03256568de1ad204ef39ce3e_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:e97e24f255c291ff2260d56f571d4595917adc37a07337588c5b741bb5f76a51_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:31153e5266a86cfdece72a3d3befc20a035165c10ffe3c6b4c5643be51d5fb45_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:cee9e962edb9859a0ec06dbbd6f327e778625d2f0f84da4056a0ae7709ca01e8_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:ef3fba63b6cc2a8307e570d861381a6e4cf245f46304f25676f26bc0431d275f_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:1dc9cc75bfdc1c28a686ada922767fa5db52c100371ffdb48d3b00354fb3a676_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:615bb031102dc25944e1e1c536264154186a70c3335af402c8ff15315f391144_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:65dbde25d5b7d44a10cc18e04d4824e711ecabb5e4bdfdff9460fd5598c5c81d_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:34fff0b22b444ff8c33d92a322ec2ac9ca9c083634ce6de94e893c01b2fa609f_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:49e5d64a34ffeef0333a06153c496bbb19c0c2ee4b386b1bb38976deb93d48d5_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:9c548b01217ba19e7428457820ec372335e16f598162e12c93a37aa17bbf4113_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "buildah: Buildah allows arbitrary directory mount"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…