RHBA-2024:5039
Vulnerability from csaf_redhat - Published: 2024-08-19 16:09 - Updated: 2026-08-21 12:29Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.12.1 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.12.1 is now available with bug fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.12.1
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
8.8 (High)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in PyMySQL. When processing untrusted JSON input, keys are not escaped by the escape_dict function due to insufficient input sanitization, allowing an attacker to inject malicious SQL queries.
6.3 (Medium)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.1 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.1",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2024:5039",
"url": "https://access.redhat.com/errata/RHBA-2024:5039"
},
{
"category": "external",
"summary": "PROJQUAY-7177",
"url": "https://issues.redhat.com/browse/PROJQUAY-7177"
},
{
"category": "external",
"summary": "PROJQUAY-7425",
"url": "https://issues.redhat.com/browse/PROJQUAY-7425"
},
{
"category": "external",
"summary": "PROJQUAY-7446",
"url": "https://issues.redhat.com/browse/PROJQUAY-7446"
},
{
"category": "external",
"summary": "PROJQUAY-7449",
"url": "https://issues.redhat.com/browse/PROJQUAY-7449"
},
{
"category": "external",
"summary": "PROJQUAY-7467",
"url": "https://issues.redhat.com/browse/PROJQUAY-7467"
},
{
"category": "external",
"summary": "PROJQUAY-7487",
"url": "https://issues.redhat.com/browse/PROJQUAY-7487"
},
{
"category": "external",
"summary": "PROJQUAY-7491",
"url": "https://issues.redhat.com/browse/PROJQUAY-7491"
},
{
"category": "external",
"summary": "PROJQUAY-7523",
"url": "https://issues.redhat.com/browse/PROJQUAY-7523"
},
{
"category": "external",
"summary": "PROJQUAY-7578",
"url": "https://issues.redhat.com/browse/PROJQUAY-7578"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_5039.json"
}
],
"title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.12.1 bug fix release",
"tracking": {
"current_release_date": "2026-08-21T12:29:24+00:00",
"generator": {
"date": "2026-08-21T12:29:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHBA-2024:5039",
"initial_release_date": "2024-08-19T16:09:49+00:00",
"revision_history": [
{
"date": "2024-08-19T16:09:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-08-19T16:09:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T12:29:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Quay v3",
"product": {
"name": "Quay v3",
"product_id": "8Base-Quay-3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"product_id": "quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"product": {
"name": "quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"product_id": "quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"product": {
"name": "quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"product_id": "quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"product_id": "quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"product": {
"name": "quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"product_id": "quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.1-13"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"product": {
"name": "quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"product_id": "quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le",
"product": {
"name": "quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le",
"product_id": "quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.1-11"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"product_id": "quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"product": {
"name": "quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"product_id": "quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"product": {
"name": "quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"product_id": "quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"product_id": "quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"product": {
"name": "quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"product_id": "quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.1-13"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"product": {
"name": "quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"product_id": "quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"product": {
"name": "quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"product_id": "quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.1-11"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"product_id": "quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"product": {
"name": "quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"product_id": "quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"product": {
"name": "quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"product_id": "quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"product_id": "quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"product": {
"name": "quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"product_id": "quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.1-13"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"product": {
"name": "quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"product_id": "quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"product": {
"name": "quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"product_id": "quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.1-11"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64"
},
"product_reference": "quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x"
},
"product_reference": "quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le"
},
"product_reference": "quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64"
},
"product_reference": "quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le"
},
"product_reference": "quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x"
},
"product_reference": "quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le"
},
"product_reference": "quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64"
},
"product_reference": "quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x"
},
"product_reference": "quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64"
},
"product_reference": "quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x"
},
"product_reference": "quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le"
},
"product_reference": "quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64"
},
"product_reference": "quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x"
},
"product_reference": "quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
},
"product_reference": "quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-6345",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2024-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2297771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack does not include setuptools. The ImcSdk component uses it only during compile time in our build systems, and we do not support recompiling SRPMs. As a result, Red Hat OpenStack is not affected by this flaw.\n\nPython 2.7.18 was marked End of Life on 04/20/2020. No patches for Python 2 would be made available.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-6345"
},
{
"category": "external",
"summary": "RHBZ#2297771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-6345",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6345",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6345"
},
{
"category": "external",
"summary": "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0",
"url": "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5",
"url": "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5"
}
],
"release_date": "2024-07-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-19T16:09:49+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:5039"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools"
},
{
"cve": "CVE-2024-36039",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2024-05-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2282821"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyMySQL. When processing untrusted JSON input, keys are not escaped by the escape_dict function due to insufficient input sanitization, allowing an attacker to inject malicious SQL queries.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pymysql: SQL injection if used with untrusted JSON input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Applications not exposed to untrusted JSON input are not vulnerable to this issue. Additionally, exploitation of this vulnerability depends on the permissions granted to the database user, limiting the security impact. For this reason, this flaw was rated with a Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-36039"
},
{
"category": "external",
"summary": "RHBZ#2282821",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282821"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-36039",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-36039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-36039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36039"
}
],
"release_date": "2024-05-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-08-19T16:09:49+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:5039"
},
{
"category": "workaround",
"details": "Make sure the permissions are set correctly for each user, database, table, operation, etc. Do not expose the PyMySQL library to untrusted JSON input.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x",
"8Base-Quay-3:quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f577d16f91f542b6c1613e11c602a85e9ed5a7e21e59264e7fbadef4627721f0_ppc64le",
"8Base-Quay-3:quay/quay-rhel8@sha256:1bb2235e8cc42e18d9406c509272ba668b9761bd1a62bd87827c75dc07d6d217_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:4d72bf803cac450d16eff48bb0e48cacef77977f83560f274982e2a62a5aa7ab_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:eaea91ebc5e9cdc7beb45b88065b339c431eb8d736046c33df9429017c900fee_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-pymysql: SQL injection if used with untrusted JSON input"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…