RHSA-2025:0577
Vulnerability from csaf_redhat - Published: 2025-01-22 01:32 - Updated: 2026-04-04 16:34Summary
Red Hat Security Advisory: Red Hat multicluster global hub 1.3.2 enhancements and container updates
Severity
Important
Notes
Topic: Red Hat multicluster global hub 1.3.2 general availability and release images
provide enhancements, security fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE links in the References section.
Details: Red Hat multicluster global hub 1.3.2 images
This advisory contains the container images for Red Hat multicluster
global hub. These container images provide enhancements.
This advisory contains enhancements and updates to the global hub
container images.
Security fix(es):
* golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause
authorization bypass in golang.org/x/crypto (CVE-2024-45337)
* golang.org/x/net/html: Non-linear parsing of case-insensitive content in
golang.org/x/net/html (CVE-2024-45338)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
8.2 (High)
Vendor Fix
Before you apply this update, make sure all the earlier released erratas are
relevant and have been applied to your system.
See the multicluster global hub product documentation for more information:
https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html-single/multicluster_global_hub/index
https://access.redhat.com/errata/RHSA-2025:0577
Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
7.5 (High)
Vendor Fix
Before you apply this update, make sure all the earlier released erratas are
relevant and have been applied to your system.
See the multicluster global hub product documentation for more information:
https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html-single/multicluster_global_hub/index
https://access.redhat.com/errata/RHSA-2025:0577
References
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat multicluster global hub 1.3.2 general availability and release images\nprovide enhancements, security fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub 1.3.2 images\n\nThis advisory contains the container images for Red Hat multicluster\nglobal hub. These container images provide enhancements. \n\nThis advisory contains enhancements and updates to the global hub \ncontainer images.\n\nSecurity fix(es):\n\n* golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause\nauthorization bypass in golang.org/x/crypto (CVE-2024-45337)\n* golang.org/x/net/html: Non-linear parsing of case-insensitive content in\ngolang.org/x/net/html (CVE-2024-45338)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:0577",
"url": "https://access.redhat.com/errata/RHSA-2025:0577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "ACM-16468",
"url": "https://issues.redhat.com/browse/ACM-16468"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0577.json"
}
],
"title": "Red Hat Security Advisory: Red Hat multicluster global hub 1.3.2 enhancements and container updates",
"tracking": {
"current_release_date": "2026-04-04T16:34:11+00:00",
"generator": {
"date": "2026-04-04T16:34:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.4"
}
},
"id": "RHSA-2025:0577",
"initial_release_date": "2025-01-22T01:32:21+00:00",
"revision_history": [
{
"date": "2025-01-22T01:32:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-01-22T01:32:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-04T16:34:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster-globalhub 1.3 for RHEL 9",
"product": {
"name": "multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster-globalhub"
},
{
"branches": [
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\u0026tag=v1.3.2-3"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=v1.3.2-6"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"product_id": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=v1.3.2-3"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\u0026tag=v1.3.2-3"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=v1.3.2-6"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"product_id": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=v1.3.2-3"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\u0026tag=v1.3.2-3"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=v1.3.2-6"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"product_id": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=v1.3.2-3"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\u0026tag=v1.3.2-3"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=v1.3.2-6"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=v1.3.2-4"
}
}
},
{
"category": "product_version",
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"product": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"product_id": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=v1.3.2-3"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64 as a component of multicluster-globalhub 1.3 for RHEL 9",
"product_id": "9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
},
"product_reference": "multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64",
"relates_to_product_reference": "9Base-multicluster-globalhub-1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-22T01:32:21+00:00",
"details": "Before you apply this update, make sure all the earlier released erratas are\nrelevant and have been applied to your system.\n\nSee the multicluster global hub product documentation for more information:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html-single/multicluster_global_hub/index",
"product_ids": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0577"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-01-22T01:32:21+00:00",
"details": "Before you apply this update, make sure all the earlier released erratas are\nrelevant and have been applied to your system.\n\nSee the multicluster global hub product documentation for more information:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html-single/multicluster_global_hub/index",
"product_ids": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:0577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:31807e7bf7ffb6e0af5b712b457a3d08e5fa5b6226b2716507cba3b943e2350d_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:915b21c4da77c85256cd3c85f743cbb898844164643cf306396510b5a56de507_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9cefca3314ca01a16aaafa13e273bfb2b4c52366a6b2459207cb92ce3c909be9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9f590dd38a6efaebc80347c2c9f791dfe3d53c145084f167133d88fe1ad536d1_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:1ef88d295850ec5b9032d8b9363e9e9159c9d72a9e197c41eea132c3430c8c95_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:61dce3a1ca2712f1c0cebd647f2f4e60ec66d64bda21de05dbb4f4f53e76d6f7_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7397431ef3364ced0e849968fca713d7ec66e65ba398c552bf62a914b6dfa392_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ed9320bccad398dd1a2ce7e6c8b870123f1b169a03d8e82360c2231813655d0e_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:3fbe1053c181088b13507ea393321a7629274ba0988dcb557fccbf9108b982c0_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:85d00d0f5abab2ffd7c4606405335b66f98e6c31247f2235c7aedc00a163e0a3_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9bed439c770d9a595c851ac18fe490f889e0ed7bfba54cad8406ab8303825b9f_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:9f15a121d60573f04f8610d8781d37f5f660096fe382982a38b9149e84cfaca9_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:18f7ad1bc7a9058153600f13e73c60a3bc3c533e613c03bf95ee7bbeb1cc5bfb_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:237def62c9050550bfc0dc45ff0d618a7cae17fc251cb732af2a530ec2ad4a0c_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:85cd1a10daf5213b5f9eeba79f8cfcebc126a39a735f07bd8b5adf7dc04fef38_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:97ac00e1be1f9e8b4162889d1e6cd10ca7574a1f7ff3b3fdc1a56c019dfc8454_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:66d9fc989031ad5e18c32a098e8c8a4476a55a490be21be1f5853f491b314a3e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:81d683b1267eb710471d88a8f4d1d2639fc82387e163c720bc2477bd0d2072b8_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ef551dc139eb1ee2eb8c89d91dafd1dacf665a86dfd9d93fc742ac3564460b33_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:f908d7a3053aed87291b315cbf9a9c96dc905b0eca88e86d61024760760e094c_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:6c791d9455e45619be6c621e8da4c5f8ee9a79d091a6a85210ab354ee5145146_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7301980fbdffd4f2bdc39c1c61935044d4101134ece7e6753a4d58bfc0f2f167_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:97716544f06f5f273ebe9b798e9ea447d154f77715856554ad16cbe0b40cd18e_arm64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6e64d252f2e0383ce2aa28b3ca5542569a7778fb9ec683af5cdc65c9038b783_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ab94c51d19ffb5d0dc6628fef10425c93912ceef3e331d98141b3c8a73611984_s390x",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b2691b64e3f2a8e96709027ccadc580a38856d86f09dc1a9bad6cc756d5889bc_ppc64le",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b6d552cbf8a4e75c05019b7d9d66e53007037fcb911b384720316228325c203e_amd64",
"9Base-multicluster-globalhub-1.3:multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:dd981b5c0d8537bf07d48bbdfe16712e9ffe5ebdf912d9e869028eb4cb6dfd87_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…