RHBA-2025:7674
Vulnerability from csaf_redhat - Published: 2025-05-15 16:37 - Updated: 2026-08-10 21:14Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.14.1 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.14.1 is now available with bug fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.14.1
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, ".")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.
7.5 (High)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.
7.5 (High)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja's sandbox does catch calls to `str.format` and ensures they don't escape the sandbox. However, it's possible to use the `|attr` filter to get a reference to a string's plain format method, bypassing the sandbox.
7.3 (High)
Affected products
Fixed
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
29 references
Acknowledgments
jub0bs
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.14.1 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.14.1",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2025:7674",
"url": "https://access.redhat.com/errata/RHBA-2025:7674"
},
{
"category": "external",
"summary": "PROJQUAY-5172",
"url": "https://issues.redhat.com/browse/PROJQUAY-5172"
},
{
"category": "external",
"summary": "PROJQUAY-8673",
"url": "https://issues.redhat.com/browse/PROJQUAY-8673"
},
{
"category": "external",
"summary": "PROJQUAY-8680",
"url": "https://issues.redhat.com/browse/PROJQUAY-8680"
},
{
"category": "external",
"summary": "PROJQUAY-8683",
"url": "https://issues.redhat.com/browse/PROJQUAY-8683"
},
{
"category": "external",
"summary": "PROJQUAY-8716",
"url": "https://issues.redhat.com/browse/PROJQUAY-8716"
},
{
"category": "external",
"summary": "PROJQUAY-8740",
"url": "https://issues.redhat.com/browse/PROJQUAY-8740"
},
{
"category": "external",
"summary": "PROJQUAY-8771",
"url": "https://issues.redhat.com/browse/PROJQUAY-8771"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_7674.json"
}
],
"title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.14.1 bug fix release",
"tracking": {
"current_release_date": "2026-08-10T21:14:41+00:00",
"generator": {
"date": "2026-08-10T21:14:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHBA-2025:7674",
"initial_release_date": "2025-05-15T16:37:33+00:00",
"revision_history": [
{
"date": "2025-05-15T16:37:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-15T16:37:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T21:14:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Quay v3",
"product": {
"name": "Quay v3",
"product_id": "8Base-Quay-3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"product_id": "quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.14.1-6"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.14.1-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"product": {
"name": "quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"product_id": "quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.14.1-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.14.1-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"product": {
"name": "quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"product_id": "quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.14.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"product_id": "quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.14.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.14.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"product": {
"name": "quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"product_id": "quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.14.1-14"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"product": {
"name": "quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"product_id": "quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.14.1-5"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"product": {
"name": "quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"product_id": "quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.14.1-10"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"product_id": "quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.14.1-6"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.14.1-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"product": {
"name": "quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"product_id": "quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.14.1-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.14.1-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"product": {
"name": "quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"product_id": "quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.14.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"product_id": "quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.14.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.14.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"product": {
"name": "quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"product_id": "quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.14.1-14"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"product": {
"name": "quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"product_id": "quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.14.1-5"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"product": {
"name": "quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"product_id": "quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.14.1-10"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"product_id": "quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.14.1-6"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.14.1-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"product": {
"name": "quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"product_id": "quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.14.1-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.14.1-2"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"product": {
"name": "quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"product_id": "quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.14.1-1"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"product_id": "quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.14.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.14.1-3"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"product": {
"name": "quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"product_id": "quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.14.1-14"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"product": {
"name": "quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"product_id": "quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.14.1-5"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le",
"product": {
"name": "quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le",
"product_id": "quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.14.1-10"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64"
},
"product_reference": "quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le"
},
"product_reference": "quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x"
},
"product_reference": "quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64"
},
"product_reference": "quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x"
},
"product_reference": "quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le"
},
"product_reference": "quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le"
},
"product_reference": "quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x"
},
"product_reference": "quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64"
},
"product_reference": "quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le"
},
"product_reference": "quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64"
},
"product_reference": "quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x"
},
"product_reference": "quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64"
},
"product_reference": "quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x"
},
"product_reference": "quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
},
"product_reference": "quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le",
"relates_to_product_reference": "8Base-Quay-3"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"jub0bs"
]
}
],
"cve": "CVE-2025-22868",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2025-02-26T04:00:44.350024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2348366"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, \".\")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "RHBZ#2348366",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348366"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868"
},
{
"category": "external",
"summary": "https://go.dev/cl/652155",
"url": "https://go.dev/cl/652155"
},
{
"category": "external",
"summary": "https://go.dev/issue/71490",
"url": "https://go.dev/issue/71490"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3488",
"url": "https://pkg.go.dev/vuln/GO-2025-3488"
}
],
"release_date": "2025-02-26T03:07:49.012000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-15T16:37:33+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:7674"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws"
},
{
"cve": "CVE-2025-22869",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-02-26T04:00:47.683125+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2348367"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While this flaw affects both SSH clients and servers implemented with golang.org/x/crypto/ssh, realistically the flaw will only lead to a DoS when transferring large files, greatly reducing the likelihood of exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22869"
},
{
"category": "external",
"summary": "RHBZ#2348367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348367"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22869"
},
{
"category": "external",
"summary": "https://go.dev/cl/652135",
"url": "https://go.dev/cl/652135"
},
{
"category": "external",
"summary": "https://go.dev/issue/71931",
"url": "https://go.dev/issue/71931"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3487",
"url": "https://pkg.go.dev/vuln/GO-2025-3487"
}
],
"release_date": "2025-02-26T03:07:48.855000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-15T16:37:33+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:7674"
},
{
"category": "workaround",
"details": "This flaw can be mitigated when using the client only connecting to trusted servers.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh"
},
{
"cve": "CVE-2025-27516",
"cwe": {
"id": "CWE-1336",
"name": "Improper Neutralization of Special Elements Used in a Template Engine"
},
"discovery_date": "2025-03-05T21:01:07.674606+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2350190"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja\u0027s sandbox does catch calls to `str.format` and ensures they don\u0027t escape the sandbox. However, it\u0027s possible to use the `|attr` filter to get a reference to a string\u0027s plain format method, bypassing the sandbox.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jinja2: Jinja sandbox breakout through attr filter selecting format method",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as important severity due to the potential for an attacker to bypass Jinja\u0027s sandbox by exploiting the |attr filter, by controlling template content, an attacker can execute arbitrary Python code, impacting the integrity, confidentiality, and availability of the system. While the attack requires user interaction to trigger untrusted templates, the risk is significant in applications that allow such templates to be executed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-27516"
},
{
"category": "external",
"summary": "RHBZ#2350190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2350190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-27516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-27516",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27516"
},
{
"category": "external",
"summary": "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403",
"url": "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403"
},
{
"category": "external",
"summary": "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7",
"url": "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7"
}
],
"release_date": "2025-03-05T20:40:06.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-15T16:37:33+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:7674"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:0f3abf42a6d0477d38aebb01145b2958239f8086b32a1d995a13c4148b200e00_amd64",
"8Base-Quay-3:quay/clair-rhel8@sha256:180f5a0e95e8b3007d62de998d0b5c07acf98077eb2ef60653164a57c01493e6_ppc64le",
"8Base-Quay-3:quay/clair-rhel8@sha256:f3bba797e4ef9e5f53ce7f0df622fd1f7b18f33af78b5d8e4f14e98cec803ab7_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:481162609427b823920c93a8c3f62a8eec97b29103c9525546d943a77c2e3f88_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:7a0cd9ec44d5a411eb7e8230c3121425d64ef06a8d2ee2ab549f5830966cf525_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:d783dc9ca701f4d06550c11274ae432b70c827dd6dfc0cd53083112ab2c934cb_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:6194c2cb93e3a64a84f50aa071b0bdb437402dd505aedf1428be358a4abcffb4_ppc64le",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:76351f73fbd6ce2cf9c372f2b3b3b7b5104bf905782b2ad38ee27fb2b9891799_s390x",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:b4e4aa556edf6eaa97807a31966b8abab3027000a63dcdc051f77b7f6aa1b576_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:22ad43f75e0b44a9b4b6146b226790525c6ddb04391fe4e0be726d3e9c56e334_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:960a918825b0b3044632e1412e46521cbb45f0ee96fa27a4878145e6b6758710_ppc64le",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:fea1e37a197bab995cee470bf474c85126d32bc992ae61ac36b3f1c732da0526_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:3436d331e245c7717e850551ca0a75ef0946cb1de7a60b49e75c331ed2b4bfcf_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:7196db2e7812fbe818cad31d559a96e42f0444eb5b73cd2f492746da2826eb72_s390x",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:79a0edb096c22f3da3b7ce842b0096478e0f4b03a0f0f3d45e3376be44725edf_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:123de7077d1e312028e43276994c0241b6ab7fd6c90529749f1aebac5ecd84eb_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:55a0afe2d4ffd72f4d1fddadbea280941c020e741acbfa6a5152c3331b130714_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e3c4f6573426071004afd6112f14eaf528c735517e4e24408069c7e221c5aa59_ppc64le",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4e412ed2ffc7cbf3eb58fbab93e87e13653cabd010e14b902ce2e36adae0bf30_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5ea9148cddc8cea3a54876b75871f010716888f0afe63e5699dc4363ec32d5e2_s390x",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:f4ecbbf9355ec0cc9b49aaefd30d21ca9fe0372a72f17bac5b3eb6207b5a9c84_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:29f32df896c9916f853f4d33e0fd411b5662e7bb2e2e9bad414afbcaa096a75a_ppc64le",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:b71cd8c82f6915578b9d4a0ecc86c4dcc3e8dbc9cbafe199320971019b1850eb_s390x",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:d9fc5df956f8c6eadee8bffe5c87f39046c3aba12d27b94a230ee3d95f1bb4ce_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:62e4e9704df33a38978ae53093a00d6d3dd1ec52d948847258efa071907fa89d_ppc64le",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:6389a934229c9677067d1540b98fa73bb25b44e704abc6634a2ba305439c9899_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:75dc27fc000f1008eb1a52aee371c5e327e44464014f44d31ce56bba41e9288a_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:07b14d30216cdda2282e266bfda2b05e42483eb7da3dec2bc3f72a7b55719d87_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:88f934345fe6f98db6469acadaee891f7a106151b3a4b9ead4530043a230b3dc_s390x",
"8Base-Quay-3:quay/quay-rhel8@sha256:e993b99bccb23185313d70c3f082cd2b376765dd1838139a473de10813b66fe2_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jinja2: Jinja sandbox breakout through attr filter selecting format method"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…