Containers/image: digest type does not guarantee valid type
Priority LOW 39CWE-354Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 13 fixed, 14 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01279 70th percentileScored 2026-11-07
Fix Partial image: 5.29.3, 5.30.1github.com/containers/image (Go): 5.30.1+1 more productRed Hat: 25 advisoriesRed Hat: 13 fixed, 14 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | image | before 5.29.3; 5.30.0 to before 5.30.1 | 5.29.3, 5.30.1 | Patch available | CNA |
| Red Hat | OADP-1.3-RHEL-9 | — | 1.3.4-9 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-4 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-3 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-3 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-3 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.5-3 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-1 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.2-2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8100020240808093819.afee755d | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2:1.37.2-1.el9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2:1.16.1-1.el9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2:5.2.2-1.el9 | Patch available | CNA |
| Red Hat | Red Hat Migration Toolkit for Containers 1.8 | — | v1.8.4-22 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 3:4.4.1-13.rhaos4.13.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 2:1.11.3-3.rhaos4.13.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 3:4.4.1-19.rhaos4.14.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 2:1.11.3-3.rhaos4.14.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202409162258-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202409162258-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 3:4.4.1-30.rhaos4.15.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 2:1.11.3-4.rhaos4.15.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202410230304.p0.g366295f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202409162258-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 4:4.9.4-5.1.rhaos4.16.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 2:1.14.4-1.rhaos4.16.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 1.29.5-7.rhaos4.16.git7db4ada.el8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | v4.16.0-202409231504.p0.g342902b.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 | Patch available | CNA |
| Red Hat | RHEL-9-CNV-4.15 | — | v4.15.5-7 | Patch available | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | Multicluster Engine for Kubernetes | — | — | Not affected | CNA |
| Red Hat | OpenShift Developer Tools and Services | — | — | No fix listed | CNA |
| Red Hat | OpenShift Developer Tools and Services | — | — | No fix listed | CNA |
| Red Hat | OpenShift Serverless | — | — | No fix listed | CNA |
| Red Hat | OpenShift Serverless | — | — | No fix listed | CNA |
| Red Hat | OpenShift Source-to-Image (S2I) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 1.2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 3.11 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 3.11 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform Assisted Installer 1 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform Assisted Installer 1 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform Assisted Installer 1 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Dev Spaces | — | — | No fix listed | CNA |
| Red Hat | Red Hat Openshift Sandboxed Containers | — | — | No fix listed | CNA |
| Red Hat | Red Hat Openshift Sandboxed Containers | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenStack Platform 16.2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Quay 3 | — | — | Not affected | CNA |
| — | github.com/containers/image (Go) | before 5.30.1 | 5.30.1 | Patch available | GHSA-6wvf-f2vw-3425 |
| — | github.com/containers/image/v5 (Go) | 5.30.0 to before 5.30.1 | 5.30.1 | Patch available | GHSA-6wvf-f2vw-3425 |
| — | github.com/containers/image/v5 (Go) | before 5.29.3 | 5.29.3 | Patch available | GHSA-6wvf-f2vw-3425 |
- image Vendor— Affected before 5.29.3; 5.30.0 to before 5.30.1 Fixed in 5.29.3, 5.30.1 Patch available CNA
- OADP-1.3-RHEL-9 VendorRed Hat Affected — Fixed in 1.3.4-9 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-4 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-3 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-3 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-3 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.5-3 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-1 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.2-2 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8100020240808093819.afee755d Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2:1.37.2-1.el9 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2:1.16.1-1.el9 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2:5.2.2-1.el9 Patch available CNA
- Red Hat Migration Toolkit for Containers 1.8 VendorRed Hat Affected — Fixed in v1.8.4-22 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 3:4.4.1-13.rhaos4.13.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 2:1.11.3-3.rhaos4.13.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 3:4.4.1-19.rhaos4.14.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 2:1.11.3-3.rhaos4.14.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202409162258-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202409162258-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 3:4.4.1-30.rhaos4.15.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 2:1.11.3-4.rhaos4.15.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202410230304.p0.g366295f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202409162258-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 4:4.9.4-5.1.rhaos4.16.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 2:1.14.4-1.rhaos4.16.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 1.29.5-7.rhaos4.16.git7db4ada.el8 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in v4.16.0-202409231504.p0.g342902b.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 Patch available CNA
- RHEL-9-CNV-4.15 VendorRed Hat Affected — Fixed in v4.15.5-7 Patch available CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- Multicluster Engine for Kubernetes VendorRed Hat Affected — Fixed in — Not affected CNA
- OpenShift Developer Tools and Services VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Developer Tools and Services VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Serverless VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Serverless VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Source-to-Image (S2I) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Security 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 1.2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 3.11 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 3.11 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform Assisted Installer 1 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform Assisted Installer 1 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform Assisted Installer 1 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Dev Spaces VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Openshift Sandboxed Containers VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Openshift Sandboxed Containers VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Virtualization 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenStack Platform 16.2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Quay 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- github.com/containers/image (Go) Vendor— Affected before 5.30.1 Fixed in 5.30.1 Patch available GHSA-6wvf-f2vw-3425
- github.com/containers/image/v5 (Go) Vendor— Affected 5.30.0 to before 5.30.1 Fixed in 5.30.1 Patch available GHSA-6wvf-f2vw-3425
- github.com/containers/image/v5 (Go) Vendor— Affected before 5.29.3 Fixed in 5.29.3 Patch available GHSA-6wvf-f2vw-3425
CPE names CNA · 41
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:openshift_api_data_protection:1.3::el9 | 1.3 | — | Red Hat |
| cpe:/a:redhat:advanced_cluster_security:4.4::el8 | 4.4 | — | Red Hat |
| cpe:/a:redhat:advanced_cluster_security:4.5::el8 | 4.5 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:rhmt:1.8::el8 | 1.8 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el8 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el9 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift_ironic:4.13::el9 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el8 | 4.14 | — | Red Hat |
- cpe:/a:redhat:openshift_api_data_protection:1.3::el9 Versions 1.3 — ·Red Hat
- cpe:/a:redhat:advanced_cluster_security:4.4::el8 Versions 4.4 — ·Red Hat
- cpe:/a:redhat:advanced_cluster_security:4.5::el8 Versions 4.5 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:rhmt:1.8::el8 Versions 1.8 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el8 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el9 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift_ironic:4.13::el9 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el8 Versions 4.14 — ·Red Hat
Show 31 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:openshift:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift_ironic:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el8 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift_ironic:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el8 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift_ironic:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:container_native_virtualization:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:multicluster_engine | — | — | Red Hat |
| cpe:/a:redhat:ocp_tools | — | — | Red Hat |
| cpe:/a:redhat:serverless:1 | 1 | — | Red Hat |
| cpe:/a:redhat:source_to_image:1 | 1 | — | Red Hat |
| cpe:/a:redhat:acm:2 | 2 | — | Red Hat |
| cpe:/a:redhat:advanced_cluster_security:3 | 3 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform | — | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2 | 2 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:10 | 10 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8 | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9 | 9 | — | Red Hat |
| cpe:/a:redhat:openshift:3.11 | 3.11 | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
| cpe:/a:redhat:assisted_installer:1 | 1 | — | Red Hat |
| cpe:/a:redhat:openshift_devspaces:3 | 3 | — | Red Hat |
| cpe:/a:redhat:openshift_sandboxed_containers:1 | 1 | — | Red Hat |
| cpe:/a:redhat:container_native_virtualization:4 | 4 | — | Red Hat |
| cpe:/a:redhat:openstack:16.2 | 16.2 | — | Red Hat |
| cpe:/a:redhat:quay:3 | 3 | — | Red Hat |
- cpe:/a:redhat:openshift:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift_ironic:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el8 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift_ironic:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el8 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift_ironic:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:container_native_virtualization:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:multicluster_engine Versions — — ·Red Hat
- cpe:/a:redhat:ocp_tools Versions — — ·Red Hat
- cpe:/a:redhat:serverless:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:source_to_image:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:acm:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:advanced_cluster_security:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform Versions — — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9 Versions 9 — ·Red Hat
- cpe:/a:redhat:openshift:3.11 Versions 3.11 — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:assisted_installer:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:openshift_devspaces:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:openshift_sandboxed_containers:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:container_native_virtualization:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:openstack:16.2 Versions 16.2 — ·Red Hat
- cpe:/a:redhat:quay:3 Versions 3 — ·Red Hat
Remediation
- Fix · CNA image Fixed in 5.29.3, 5.30.1
- Fix · GHSA-6wvf-f2vw-3425 github.com/containers/image (Go) Fixed in 5.30.1 Advisory →
- Fix · GHSA-6wvf-f2vw-3425 github.com/containers/image/v5 (Go) Fixed in 5.30.1 Advisory →
- Fix · GHSA-6wvf-f2vw-3425 github.com/containers/image/v5 (Go) Fixed in 5.29.3 Advisory →
Red Hat 25 advisories
- RHSA-2024:6122 Released 2025-02-25 · Red Hat rating ImportantOpenShift Container Platform 4.18.1 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
- RHSA-2024:9960 Released 2024-11-19 · Red Hat rating ImportantOpenShift API for Data Protection (OADP) 1.3.4 security and bug fix update
- 9Base-OADP-1.3 oadp/oadp-velero-plugin-rhel9, oadp/oadp-velero-rhel9
- RHSA-2024:9097 Released 2024-11-12 · Red Hat rating Moderatebuildah security update
- Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.37.2-1.el9, buildah-tests-2:1.37.2-1.el9
Show 22 more Red Hat advisories
- RHSA-2024:9098 Released 2024-11-12 · Red Hat rating Moderateskopeo security update
- Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.16.1-1.el9, skopeo-tests-2:1.16.1-1.el9
- RHSA-2024:9102 Released 2024-11-12 · Red Hat rating Moderatepodman security update
- Red Hat Enterprise Linux AppStream (v. 9) podman-2:5.2.2-1.el9, podman-docker-2:5.2.2-1.el9, podman-plugins-2:5.2.2-1.el9 +2
- RHSA-2024:8425 Released 2024-10-31 · Red Hat rating ImportantOpenShift Container Platform 4.15.37 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kube-metrics-server-rhel8 +47
- RHSA-2024:8260 Released 2024-10-24 · Red Hat rating ImportantOpenShift Container Platform 4.16.18 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2024:7941 Released 2024-10-16 · Red Hat rating ImportantOpenShift Container Platform 4.13.z security update
- Ironic content for Red Hat OpenShift Container Platform 4.13 openstack-ironic-1:21.3.1-0.20240911165036.c0d61d0.el9, openstack-ironic-api-1:21.3.1-0.20240911165036.c0d61d0.el9, openstack-ironic-common-1:21.3.1-0.20240911165036.c0d61d0.el9 +5
- Red Hat OpenShift Container Platform 4.13 podman-3:4.4.1-13.rhaos4.13.el8, podman-3:4.4.1-14.rhaos4.13.el9, podman-catatonit-3:4.4.1-13.rhaos4.13.el8 +14
- RHSA-2024:7922 Released 2024-10-16 · Red Hat rating ImportantOpenShift Container Platform 4.17.1 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2024:7187 Released 2024-10-03 · Red Hat rating ModerateOpenShift Container Platform 4.14.38 security update
- Ironic content for Red Hat OpenShift Container Platform 4.14 python-webob-1.8.8-2.el9, python3-webob-1.8.8-2.el9
- Red Hat OpenShift Container Platform 4.14 podman-3:4.4.1-19.rhaos4.14.el8, podman-3:4.4.1-19.rhaos4.14.el9, podman-catatonit-3:4.4.1-19.rhaos4.14.el8 +14
- RHSA-2024:7182 Released 2024-10-02 · Red Hat rating ModerateOpenShift Container Platform 4.15.35 packages and security update
- Ironic content for Red Hat OpenShift Container Platform 4.15 python-webob-1.8.8-2.el9, python3-webob-1.8.8-2.el9
- Red Hat OpenShift Container Platform 4.15 podman-3:4.4.1-30.rhaos4.15.el8, podman-3:4.4.1-30.rhaos4.15.el9, podman-catatonit-3:4.4.1-30.rhaos4.15.el8 +14
- RHSA-2024:7174 Released 2024-10-02 · Red Hat rating ImportantOpenShift Container Platform 4.16.15 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2024:3718 Released 2024-10-01 · Red Hat rating ModerateOpenShift Container Platform 4.17.0 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2024:7164 Released 2024-09-26 · Red Hat rating ImportantMigration Toolkit for Containers (MTC) 1.8.4 security and bug fix update
- 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-registry-rhel8, rhmtc/openshift-migration-ui-rhel8
- RHSA-2024:6818 Released 2024-09-25 · Red Hat rating ModerateOpenShift Container Platform 4.15.34 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/network-tools-rhel8, openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-agent-installer-node-agent-rhel9 +26
- RHSA-2024:6824 Released 2024-09-24 · Red Hat rating ModerateOpenShift Container Platform 4.16.14 security update
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-baremetal-rhel9-operator, openshift4/ose-docker-builder-rhel9, openshift4/ose-machine-config-rhel9-operator
- RHSA-2024:6708 Released 2024-09-16 · Red Hat rating ModerateACS 4.5 enhancement and security update
- RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
- RHSA-2024:6054 Released 2024-08-29 · Red Hat rating ImportantACS 4.4 enhancement and security update
- RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
- RHSA-2024:5951 Released 2024-08-28 · Red Hat rating LowOpenShift Virtualization 4.15.5 Images
- CNV 4.15 for RHEL 9 container-native-virtualization/virt-cdi-controller-rhel9
- RHSA-2024:5258 Released 2024-08-13 · Red Hat rating Importantcontainer-tools:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.0-1.module+el8.10.0+22202+761b9a65.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+22202+761b9a65.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+22202+761b9a65.s390x::container-tools:rhel8 +47
- RHSA-2024:4960 Released 2024-08-07 · Red Hat rating ImportantOpenShift Container Platform 4.14.34 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +6
- RHSA-2024:4850 Released 2024-07-31 · Red Hat rating ModerateOpenShift Container Platform 4.15.24 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-coredns-rhel9, openshift4/ose-operator-lifecycle-manager-rhel9
- RHSA-2024:4613 Released 2024-07-24 · Red Hat rating ModerateOpenShift Container Platform 4.16.4 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/egress-router-cni-rhel9, openshift4/network-tools-rhel9, openshift4/ose-agent-installer-api-server-rhel9 +35
- RHSA-2024:4159 Released 2024-07-03 · Red Hat rating ImportantOpenShift Container Platform 4.16.1 packages and security update
- Red Hat OpenShift Container Platform 4.16 bpftool-7.3.0-427.24.1.el9_4, cri-o-1.29.5-7.rhaos4.16.git7db4ada.el8, cri-o-1.29.5-7.rhaos4.16.git7db4ada.el9 +47
- RHSA-2024:0045 Released 2024-06-27 · Red Hat rating ImportantOpenShift Container Platform 4.16.0 security update
- Ironic content for Red Hat OpenShift Container Platform 4.16 python-eventlet-0.33.1-6.el9, python3-eventlet-0.33.1-6.el9
- Red Hat OpenShift Container Platform 4.16 butane-0.21.0-1.rhaos4.16.el8, butane-redistributable-0.21.0-1.rhaos4.16.el8, cri-o-1.29.5-5.rhaos4.16.git7032128.el8 +43
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| OpenShift Developer Tools and Services | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix planned: Will not fix |
| OpenShift Source-to-Image (S2I) | Affected | No fix yet |
| Red Hat Advanced Cluster Security 3 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 3.11 | Affected | No fix planned: Out of support scope |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Container Platform Assisted Installer 1 | Affected | No fix yet |
| Red Hat OpenShift Dev Spaces | Affected | No fix yet |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet |
| Red Hat OpenStack Platform 16.2 | Affected | No fix planned: Will not fix |
| Red Hat Openshift Sandboxed Containers | Affected | No fix yet |
| 8Base-RHMTC-1.8 | Fixed | RHSA-2024:7164 |
| 9Base-OADP-1.3 | Fixed | RHSA-2024:9960 |
| CNV 4.15 for RHEL 9 | Fixed | RHSA-2024:5951 |
| RHACS 4.4 for RHEL 8 | Fixed | RHSA-2024:6054 |
| RHACS 4.5 for RHEL 8 | Fixed | RHSA-2024:6708 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:5258 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:9097, RHSA-2024:9098, RHSA-2024:9102 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2024:7941 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2024:4960, RHSA-2024:7187 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2024:4850, RHSA-2024:6818, RHSA-2024:7182, RHSA-2024:8425 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2024:0045, RHSA-2024:4159, RHSA-2024:4613, RHSA-2024:6824, RHSA-2024:7174, RHSA-2024:8260 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2024:3718, RHSA-2024:7922 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2024:6122 |
Not affected: 23 products
- 8Base-RHMTC-1.8
- 9Base-OADP-1.3
- CNV 4.15 for RHEL 9
- Ironic content for Red Hat OpenShift Container Platform 4.13
- Ironic content for Red Hat OpenShift Container Platform 4.14
- Ironic content for Red Hat OpenShift Container Platform 4.15
- Ironic content for Red Hat OpenShift Container Platform 4.16
- Multicluster Engine for Kubernetes
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Advanced Cluster Security 3
- Red Hat Ansible Automation Platform 1.2
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat Quay 3
Timeline
- 2026-10-02 Threatist record created from CVE-2024-3727
- 2026-10-03 Alias added: GHSA-6wvf-f2vw-3425
- 2026-10-08 Affected versions changed · CNA
- 2026-10-09 Fix available: openshift/[email protected], openshift/[email protected] · CNA
- 2026-10-13 Affected versions changed · CNA
- 2026-10-23 Affected versions changed · CNA
- 2026-11-05 Affected versions changed · CNA
References
Advisory 27
- RHSA-2024:0045
- RHSA-2024:3718
- RHSA-2024:4159
- RHSA-2024:4613
- RHSA-2024:4850
- RHSA-2024:4960
- RHSA-2024:5258
- RHSA-2024:5951
- RHSA-2024:6054
- RHSA-2024:6122
- RHSA-2024:6708
- RHSA-2024:6818
- RHSA-2024:6824
- RHSA-2024:7164
- RHSA-2024:7174
- RHSA-2024:7182
- RHSA-2024:7187
- RHSA-2024:7922
- RHSA-2024:7941
- RHSA-2024:8260
- RHSA-2024:8425
- RHSA-2024:9097
- RHSA-2024:9098
- RHSA-2024:9102
- RHSA-2024:9960
- https://nvd.nist.gov/vuln/detail/CVE-2024-3727
- https://github.com/advisories/GHSA-6wvf-f2vw-3425
Other 16
- https://access.redhat.com/security/cve/CVE-2024-3727
- RHBZ#2274767
- https://github.com/containers/image/commit/132678b47bae29c710589012668cb85859d88385
- https://github.com/containers/image/commit/e8948046055060605bd68289d406ce149590c33a
- https://github.com/containers/image
- https://github.com/containers/image/releases/tag/v5.29.3
- https://github.com/containers/image/releases/tag/v5.30.1
- https://lists.fedoraproject.org/archives/list/[email protected]/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD
- https://lists.fedoraproject.org/archives/list/[email protected]/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP
- https://lists.fedoraproject.org/archives/list/[email protected]/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR
- https://lists.fedoraproject.org/archives/list/[email protected]/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT
- https://lists.fedoraproject.org/archives/list/[email protected]/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC
- https://lists.fedoraproject.org/archives/list/[email protected]/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV
- https://lists.fedoraproject.org/archives/list/[email protected]/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ
- https://lists.fedoraproject.org/archives/list/[email protected]/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ
- https://lists.fedoraproject.org/archives/list/[email protected]/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-3727 · CVE Program
- CVE-2024-3727 · NVD
- FIRST EPSS
- GHSA-6wvf-f2vw-3425 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-3727 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences