{
  "threat_severity" : "Moderate",
  "public_date" : "2022-02-15T00:00:00Z",
  "bugzilla" : {
    "description" : "prometheus/client_golang: Denial of service using InstrumentHandlerCounter",
    "id" : "2045880",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2045880"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-772",
  "details" : [ "client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`; not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`. client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow a limited set of methods.", "A denial of service attack was found in prometheus/client_golang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability." ],
  "statement" : "This flaw has been rated as having a moderate impact for two main reasons. The opportunity for a Denial of Service is limited to the golang runtime. In the case of OpenShift Container Platform, this would be restricted within each individual container. Additionally, this is in alignment with upstream's (the Prometheus project) impact rating.",
  "affected_release" : [ {
    "product_name" : "Logging subsystem for Red Hat OpenShift 5.4",
    "release_date" : "2022-04-20T00:00:00Z",
    "advisory" : "RHSA-2022:1461",
    "cpe" : "cpe:/a:redhat:logging:5.4::el8",
    "package" : "openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-163"
  }, {
    "product_name" : "Logging subsystem for Red Hat OpenShift 5.4",
    "release_date" : "2022-05-11T00:00:00Z",
    "advisory" : "RHSA-2022:2216",
    "cpe" : "cpe:/a:redhat:logging:5.4::el8",
    "package" : "openshift-logging/elasticsearch-rhel8-operator:v5.4.1-4"
  }, {
    "product_name" : "OADP-1.0-RHEL-8",
    "release_date" : "2022-09-13T00:00:00Z",
    "advisory" : "RHSA-2022:6430",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1.0::el8",
    "package" : "oadp/oadp-registry-rhel8:1.0.4-6"
  }, {
    "product_name" : "OADP-1.0-RHEL-8",
    "release_date" : "2022-10-31T00:00:00Z",
    "advisory" : "RHSA-2022:7261",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1.0::el8",
    "package" : "oadp/oadp-mustgather-rhel8:1.0.5-20"
  }, {
    "product_name" : "OADP-1.0-RHEL-8",
    "release_date" : "2022-10-31T00:00:00Z",
    "advisory" : "RHSA-2022:7261",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1.0::el8",
    "package" : "oadp/oadp-rhel8-operator:1.0.5-16"
  }, {
    "product_name" : "OADP-1.1-RHEL-8",
    "release_date" : "2022-09-01T00:00:00Z",
    "advisory" : "RHSA-2022:6290",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1.1::el8",
    "package" : "oadp/oadp-velero-plugin-rhel8:1.1.0-20"
  }, {
    "product_name" : "OADP-1.1-RHEL-8",
    "release_date" : "2023-09-20T00:00:00Z",
    "advisory" : "RHSA-2023:5314",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1.1::el8",
    "package" : "oadp/oadp-velero-rhel8:1.1.6-7"
  }, {
    "product_name" : "OpenShift Logging 5.2",
    "release_date" : "2022-05-11T00:00:00Z",
    "advisory" : "RHSA-2022:2218",
    "cpe" : "cpe:/a:redhat:logging:5.2::el8",
    "package" : "openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-168"
  }, {
    "product_name" : "OpenShift Logging 5.2",
    "release_date" : "2022-05-11T00:00:00Z",
    "advisory" : "RHSA-2022:2218",
    "cpe" : "cpe:/a:redhat:logging:5.2::el8",
    "package" : "openshift-logging/elasticsearch-rhel8-operator:v5.2.10-5"
  }, {
    "product_name" : "OpenShift Logging 5.3",
    "release_date" : "2022-05-11T00:00:00Z",
    "advisory" : "RHSA-2022:2217",
    "cpe" : "cpe:/a:redhat:logging:5.3::el8",
    "package" : "openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-171"
  }, {
    "product_name" : "OpenShift Logging 5.3",
    "release_date" : "2022-05-11T00:00:00Z",
    "advisory" : "RHSA-2022:2217",
    "cpe" : "cpe:/a:redhat:logging:5.3::el8",
    "package" : "openshift-logging/elasticsearch-rhel8-operator:v5.3.7-5"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/client-kn-rhel8:1.3.1-4"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-controller-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-controller-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-post-install-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-webhook-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-mtbroker-filter-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-mtbroker-ingress-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-mtchannel-broker-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-mtping-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-storage-version-migration-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-sugar-controller-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/eventing-webhook-rhel8:1.3.2-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/ingress-rhel8-operator:1.24.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/knative-rhel8-operator:1.24.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/kn-cli-artifacts-rhel8:1.3.1-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/kourier-control-rhel8:1.3.0-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/net-istio-controller-rhel8:1.3.0-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/net-istio-webhook-rhel8:1.3.0-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serverless-operator-bundle:1.24.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serverless-rhel8-operator:1.24.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-activator-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-autoscaler-hpa-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-autoscaler-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-controller-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-domain-mapping-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-domain-mapping-webhook-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-queue-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-storage-version-migration-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/serving-webhook-rhel8:1.3.0-3"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1/svls-must-gather-rhel8:1.24.0-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serveless 1.24",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6040",
    "cpe" : "cpe:/a:redhat:serverless:1.24::el8",
    "package" : "openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8:1.3.2-2"
  }, {
    "product_name" : "Openshift Serverless 1 on RHEL 8",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:6042",
    "cpe" : "cpe:/a:redhat:serverless:1.0::el8",
    "package" : "openshift-serverless-clients-0:1.3.1-4.el8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2022-05-10T00:00:00Z",
    "advisory" : "RHSA-2022:1762",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "container-tools:rhel8-8060020220401155929.2e213529"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2022-11-08T00:00:00Z",
    "advisory" : "RHSA-2022:7519",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "grafana-0:7.5.15-3.el8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2022-11-08T00:00:00Z",
    "advisory" : "RHSA-2022:7529",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "container-tools:3.0-8070020220802115906.39077419"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2024-01-30T00:00:00Z",
    "advisory" : "RHSA-2024:0564",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.4",
    "package" : "container-tools:3.0-8040020240104111259.c0c392d5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "release_date" : "2024-01-30T00:00:00Z",
    "advisory" : "RHSA-2024:0564",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.4",
    "package" : "container-tools:3.0-8040020240104111259.c0c392d5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
    "release_date" : "2024-01-30T00:00:00Z",
    "advisory" : "RHSA-2024:0564",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.4",
    "package" : "container-tools:3.0-8040020240104111259.c0c392d5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2022-11-15T00:00:00Z",
    "advisory" : "RHSA-2022:8057",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "grafana-0:7.5.15-3.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "release_date" : "2022-05-31T00:00:00Z",
    "advisory" : "RHSA-2022:2280",
    "cpe" : "cpe:/a:redhat:openshift:3.11::el7",
    "package" : "atomic-openshift-dockerregistry-0:3.11.705-1.g0fa231c.el7"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.10",
    "release_date" : "2022-08-09T00:00:00Z",
    "advisory" : "RHBA-2022:5876",
    "cpe" : "cpe:/a:redhat:openshift:4.10::el8",
    "package" : "openshift4/kubernetes-nmstate-rhel8-operator:v4.10.0-202207291908.p0.g5f0b20d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.10",
    "release_date" : "2022-08-09T00:00:00Z",
    "advisory" : "RHBA-2022:5876",
    "cpe" : "cpe:/a:redhat:openshift:4.10::el8",
    "package" : "openshift4/ose-kubernetes-nmstate-handler-rhel8:v4.10.0-202207291908.p0.g5f0b20d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.10",
    "release_date" : "2022-04-21T00:00:00Z",
    "advisory" : "RHSA-2022:1356",
    "cpe" : "cpe:/a:redhat:openshift:4.10::el8",
    "package" : "openshift4/ose-openstack-machine-controllers:v4.10.0-202204090935.p0.g12df76b.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5068",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "buildah-1:1.23.4-2.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5068",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift-clients-0:4.11.0-202207291716.p0.g7075089.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8:v4.11.0-202208020235.p0.gf70a51b.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-alibaba-machine-controllers-rhel8:v4.11.0-202208020235.p0.g4145108.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-aws-ebs-csi-driver-rhel8-operator:v4.11.0-202208020235.p0.g2c7529e.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-aws-pod-identity-webhook-rhel8:v4.11.0-202208020235.p0.ga085f1c.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-azure-disk-csi-driver-rhel8:v4.11.0-202208020235.p0.g0fe424e.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-azure-disk-csi-driver-rhel8-operator:v4.11.0-202208020235.p0.gc4197c3.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-azure-file-csi-driver-operator-rhel8:v4.11.0-202208020235.p0.gcbe7044.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-azure-file-csi-driver-rhel8:v4.11.0-202208020235.p0.g67c3831.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-baremetal-machine-controllers:v4.11.0-202208020235.p0.ga65be86.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cloud-credential-operator:v4.11.0-202208020235.p0.g9a40d74.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-autoscaler-operator:v4.11.0-202208020706.p0.gfcffbcd.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-capi-operator-container-rhel8:v4.11.0-202208020235.p0.g1a88f55.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-capi-rhel8-operator:v4.11.0-202208020235.p0.g1a88f55.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-cloud-controller-manager-operator-rhel8:v4.11.0-202208020235.p0.gc2f2cbf.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator:v4.11.0-202208020706.p0.g8d0774f.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-etcd-rhel8-operator:v4.11.0-202208020235.p0.gbcae2f3.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-image-registry-operator:v4.11.0-202208020235.p0.g4d66ea3.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-kube-controller-manager-operator:v4.11.0-202208020235.p0.ga6cb428.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-kube-scheduler-operator:v4.11.0-202208020235.p0.gb8fed26.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-monitoring-operator:v4.11.0-202208020235.p0.gfcc377d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-network-operator:v4.11.0-202208020235.p0.g3528a6b.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-node-tuning-operator:v4.11.0-202208020235.p0.ga7921b7.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-openshift-controller-manager-operator:v4.11.0-202208020235.p0.g0315835.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-policy-controller-rhel8:v4.11.0-202208020235.p0.gc7201ed.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-samples-operator:v4.11.0-202208020235.p0.g375a4a9.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cluster-storage-operator:v4.11.0-202208020235.p0.gce8a6de.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-configmap-reloader:v4.11.0-202208020235.p0.gb7c03bb.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-console:v4.11.0-202208021257.p0.ge0d49a2.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-driver-manila-rhel8-operator:v4.11.0-202208020235.p0.g12cb253.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-driver-nfs-rhel8:v4.11.0-202208020235.p0.gf144bb4.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-driver-shared-resource-operator-rhel8:v4.11.0-202208020706.p0.gd3985eb.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-driver-shared-resource-rhel8:v4.11.0-202208020235.p0.g3f69f2f.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-external-provisioner:v4.11.0-202208020235.p0.g86277ec.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-external-provisioner-rhel8:v4.11.0-202208020235.p0.g86277ec.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-external-resizer:v4.11.0-202208020235.p0.g2cea576.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-external-resizer-rhel8:v4.11.0-202208020235.p0.g2cea576.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-snapshot-controller:v4.11.0-202208020235.p0.g0afdf73.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-csi-snapshot-controller-rhel8:v4.11.0-202208020235.p0.g0afdf73.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-docker-builder:v4.11.0-202208020235.p0.gb500d85.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-docker-registry:v4.11.0-202208020235.p0.g9f07f43.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-gcp-pd-csi-driver-operator-rhel8:v4.11.0-202208020235.p0.gbc7bad4.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-haproxy-router:v4.11.0-202208020235.p0.g601ba57.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-ibmcloud-machine-controllers-rhel8:v4.11.0-202208020235.p0.g3bde969.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8:v4.11.0-202208020235.p0.ge4a2180.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-kube-state-metrics:v4.11.0-202208020235.p0.g896d000.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-machine-api-operator:v4.11.0-202208020235.p0.g4e3e83c.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-machine-config-operator:v4.11.0-202208020235.p0.ge722bb7.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-network-metrics-daemon-rhel8:v4.11.0-202208020235.p0.g9482ac9.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-openshift-controller-manager-rhel8:v4.11.0-202208020235.p0.g46157a3.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-openshift-state-metrics-rhel8:v4.11.0-202208020235.p0.g1a7a5dc.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-openstack-cinder-csi-driver-rhel8-operator:v4.11.0-202208020235.p0.gae4c45c.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-openstack-machine-controllers:v4.11.0-202208020235.p0.g440ca42.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-operator-lifecycle-manager:v4.11.0-202208020235.p0.g8c2bd46.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-operator-marketplace:v4.11.0-202208020235.p0.g040c64e.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-prometheus:v4.11.0-202208020235.p0.gd2dfc27.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-prometheus-alertmanager:v4.11.0-202208020235.p0.g05cfc39.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-prometheus-operator:v4.11.0-202208020235.p0.gcb3afa2.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-sdn-rhel8:v4.11.0-202208020235.p0.gb76d388.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-telemeter:v4.11.0-202208020235.p0.g77b2966.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-tests:v4.11.0-202208020706.p0.gb860532.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-thanos-rhel8:v4.11.0-202208020235.p0.gf08da2d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8:v4.11.0-202208020235.p0.g9914824.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-vsphere-cloud-controller-manager-rhel8:v4.11.0-202208020235.p0.g6fd8e8d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-vsphere-csi-driver-operator-rhel8:v4.11.0-202208020235.p0.g9914824.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-vsphere-problem-detector-rhel8:v4.11.0-202208020235.p0.g5910f33.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ovirt-csi-driver-rhel7:v4.11.0-202208020235.p0.g0b3d79b.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ovirt-csi-driver-rhel8:v4.11.0-202208020235.p0.g0b3d79b.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5069",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ovirt-csi-driver-rhel8-operator:v4.11.0-202208020235.p0.g7a30e38.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5070",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/cloud-event-proxy-rhel8:v4.11.0-202208020706.p0.g642796d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5070",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cloud-event-proxy:v4.11.0-202208020706.p0.g642796d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-08-10T00:00:00Z",
    "advisory" : "RHSA-2022:5070",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-cloud-event-proxy-rhel8:v4.11.0-202208020706.p0.g642796d.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2022-09-20T00:00:00Z",
    "advisory" : "RHSA-2022:6537",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-sriov-network-webhook:v4.11.0-202209130958.p0.gb4f9fbd.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2023-02-07T00:00:00Z",
    "advisory" : "RHSA-2023:0566",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-operator-sdk-rhel8:v4.11.0-202301241446.p0.g1974dfd.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2023-02-15T00:00:00Z",
    "advisory" : "RHSA-2023:0652",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-helm-operator:v4.11.0-202302061916.p0.g1974dfd.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2023-03-14T00:00:00Z",
    "advisory" : "RHSA-2023:1158",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-baremetal-rhel8-operator:v4.11.0-202303061754.p0.g55cd252.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.11",
    "release_date" : "2023-05-02T00:00:00Z",
    "advisory" : "RHSA-2023:2014",
    "cpe" : "cpe:/a:redhat:openshift:4.11::el8",
    "package" : "openshift4/ose-multus-admission-controller:v4.11.0-202304192028.p0.gb876064.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2023-01-17T00:00:00Z",
    "advisory" : "RHSA-2022:7399",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-alibaba-cloud-controller-manager-rhel8:v4.12.0-202301042354.p0.g1959de0.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2023-01-17T00:00:00Z",
    "advisory" : "RHSA-2022:7399",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-aws-ebs-csi-driver-rhel8:v4.12.0-202301042354.p0.g1584117.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2023-01-17T00:00:00Z",
    "advisory" : "RHSA-2022:7399",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-gcp-cloud-controller-manager-rhel8:v4.12.0-202301042354.p0.g8d208a7.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2023-01-17T00:00:00Z",
    "advisory" : "RHSA-2022:7399",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-gcp-pd-csi-driver-rhel8:v4.12.0-202301042354.p0.g223d846.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2023-01-17T00:00:00Z",
    "advisory" : "RHSA-2022:7399",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-ibm-vpc-block-csi-driver-rhel8:v4.12.0-202301042354.p0.g2364e6a.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2023-01-30T00:00:00Z",
    "advisory" : "RHSA-2022:9096",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4-wincw/windows-machine-config-rhel8-operator:7.0.0-22"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2023-05-17T00:00:00Z",
    "advisory" : "RHSA-2023:1326",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-alibaba-cloud-csi-driver-container-rhel8:v4.13.0-202304190216.p0.g68c0ecf.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2023-05-17T00:00:00Z",
    "advisory" : "RHSA-2023:1326",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-installer:v4.13.0-202305091542.p0.g44db7b2.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2023-05-17T00:00:00Z",
    "advisory" : "RHSA-2023:1326",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-multus-admission-controller:v4.13.0-202304190216.p0.gd6d52a7.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2023-05-17T00:00:00Z",
    "advisory" : "RHSA-2023:1326",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.13.0-202304190216.p0.g6f4295b.assembly.stream"
  }, {
    "product_name" : "Red Hat OpenShift Data Foundation 4.11 on RHEL8",
    "release_date" : "2022-08-24T00:00:00Z",
    "advisory" : "RHSA-2022:6156",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.11::el8",
    "package" : "odf4/ocs-rhel8-operator:v4.11.0-67"
  }, {
    "product_name" : "Red Hat OpenShift Data Foundation 4.11 on RHEL8",
    "release_date" : "2022-08-24T00:00:00Z",
    "advisory" : "RHSA-2022:6156",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.11::el8",
    "package" : "odf4/odf-lvm-rhel8-operator:v4.11.0-39"
  }, {
    "product_name" : "Red Hat OpenShift Data Foundation 4.11 on RHEL8",
    "release_date" : "2022-08-24T00:00:00Z",
    "advisory" : "RHSA-2022:6156",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.11::el8",
    "package" : "odf4/odf-rhel8-operator:v4.11.0-27"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces 3 Containers",
    "release_date" : "2024-07-18T00:00:00Z",
    "advisory" : "RHSA-2024:4631",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3::el8",
    "package" : "devspaces/configbump-rhel8:3.15-2"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces 3 Containers",
    "release_date" : "2024-07-18T00:00:00Z",
    "advisory" : "RHSA-2024:4631",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3::el8",
    "package" : "devspaces/devspaces-rhel8-operator:3.15-10"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.1",
    "release_date" : "2022-08-15T00:00:00Z",
    "advisory" : "RHSA-2022:6066",
    "cpe" : "cpe:/a:redhat:openstack:16.1::el8",
    "package" : "etcd-0:3.3.23-10.el8ost"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "release_date" : "2022-08-15T00:00:00Z",
    "advisory" : "RHSA-2022:6061",
    "cpe" : "cpe:/a:redhat:openstack:16.2::el8",
    "package" : "etcd-0:3.3.23-10.el8ost"
  }, {
    "product_name" : "RHEL-7-CNV-4.10",
    "release_date" : "2022-05-18T00:00:00Z",
    "advisory" : "RHSA-2022:4667",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4.10::el7",
    "package" : "kubevirt-0:4.10.1-489.el7"
  }, {
    "product_name" : "RHEL-8 based Middleware Containers",
    "release_date" : "2024-05-21T00:00:00Z",
    "advisory" : "RHSA-2024:2944",
    "cpe" : "cpe:/a:redhat:rhosemc:1.0::el8",
    "package" : "amq7/amq-broker-rhel8-operator:7.12.0-16"
  }, {
    "product_name" : "RHEL-8 based Middleware Containers",
    "release_date" : "2024-05-21T00:00:00Z",
    "advisory" : "RHSA-2024:2944",
    "cpe" : "cpe:/a:redhat:rhosemc:1.0::el8",
    "package" : "amq7/amq-broker-rhel8-operator-bundle:7.12.0-10"
  }, {
    "product_name" : "RHEL-8-CNV-4.10",
    "release_date" : "2022-05-18T00:00:00Z",
    "advisory" : "RHSA-2022:4667",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4.10::el8",
    "package" : "kubevirt-0:4.10.1-489.el8"
  }, {
    "product_name" : "RHEL-8-CNV-4.10",
    "release_date" : "2022-06-14T00:00:00Z",
    "advisory" : "RHSA-2022:5026",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4.10::el8",
    "package" : "container-native-virtualization/hostpath-csi-driver:v4.10.2-1"
  }, {
    "product_name" : "RHEL-8-CNV-4.10",
    "release_date" : "2022-06-14T00:00:00Z",
    "advisory" : "RHSA-2022:5026",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4.10::el8",
    "package" : "container-native-virtualization/hostpath-csi-driver-rhel8:v4.10.2-1"
  }, {
    "product_name" : "RHOL-5.5-RHEL-8",
    "release_date" : "2022-08-18T00:00:00Z",
    "advisory" : "RHSA-2022:6051",
    "cpe" : "cpe:/a:redhat:logging:5.5::el8",
    "package" : "openshift-logging/cluster-logging-rhel8-operator:v5.5.0-57"
  }, {
    "product_name" : "RHOL-5.5-RHEL-8",
    "release_date" : "2022-08-18T00:00:00Z",
    "advisory" : "RHSA-2022:6051",
    "cpe" : "cpe:/a:redhat:logging:5.5::el8",
    "package" : "openshift-logging/eventrouter-rhel8:v0.4.0-14"
  }, {
    "product_name" : "RHOL-5.5-RHEL-8",
    "release_date" : "2022-08-18T00:00:00Z",
    "advisory" : "RHSA-2022:6051",
    "cpe" : "cpe:/a:redhat:logging:5.5::el8",
    "package" : "openshift-logging/log-file-metric-exporter-rhel8:v1.1.0-38"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.6",
    "release_date" : "2025-12-17T00:00:00Z",
    "advisory" : "RHSA-2025:23528",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.6::el9",
    "package" : "multicluster-engine/kube-rbac-proxy-mce-rhel9:sha256:09eba4cc9d2b4cf826c17ea57f4c6a4960c69a22ae21138c01d69af2eb030c57"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.7",
    "release_date" : "2025-12-03T00:00:00Z",
    "advisory" : "RHSA-2025:22683",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.7::el9",
    "package" : "multicluster-engine/kube-rbac-proxy-mce-rhel9:sha256:35c4ed6b4c610f22a08a5376ddd7ce6896f4f1dda189e0f4979023cf2f17ccaf"
  }, {
    "product_name" : "multicluster engine for Kubernetes 2.8",
    "release_date" : "2026-01-15T00:00:00Z",
    "advisory" : "RHSA-2026:0722",
    "cpe" : "cpe:/a:redhat:multicluster_engine:2.8::el9",
    "package" : "multicluster-engine/kube-rbac-proxy-mce-rhel9:sha256:4e83da7474dddf6eff9c5c6dae42c19e6ba98f139022245da8ae98e43859e804"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12",
    "release_date" : "2025-12-03T00:00:00Z",
    "advisory" : "RHSA-2025:22684",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/kube-rbac-proxy-rhel9:sha256:3eb46c610db1610b8065c9e72ded3205609ff7890f1110fcc5446526b4861416"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12",
    "release_date" : "2025-12-03T00:00:00Z",
    "advisory" : "RHSA-2025:22684",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/rbac-query-proxy-rhel9:sha256:07892117f45fcd82f91062a75eb2a2984425f13065f0fc0e82466c4e324aa955"
  } ],
  "package_state" : [ {
    "product_name" : "Cost Management Metrics Operator",
    "fix_state" : "Affected",
    "package_name" : "costmanagement-metrics-operator-container",
    "cpe" : "cpe:/a:redhat:cost_management:1"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-controller-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-velero-restic-restore-helper-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-velero-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-velero-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Migration Toolkit for Virtualization",
    "fix_state" : "Affected",
    "package_name" : "migration-toolkit-virtualization/mtv-controller-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/kube-rbac-proxy-mce-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Affected",
    "package_name" : "helm",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Will not fix",
    "package_name" : "jenkins-operator-container",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Will not fix",
    "package_name" : "ocp-tools-4/service-binding-rhel8-operator",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Will not fix",
    "package_name" : "odo",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Affected",
    "package_name" : "source-to-image-container",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-pipelines-client",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-serverless-1-eventing-kafka-channel-webhook-rhel8-container",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Service Mesh 2",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/kiali-rhel8",
    "cpe" : "cpe:/a:redhat:service_mesh:2"
  }, {
    "product_name" : "OpenShift Service Mesh 2.0",
    "fix_state" : "Affected",
    "package_name" : "servicemesh",
    "cpe" : "cpe:/a:redhat:service_mesh:2.0"
  }, {
    "product_name" : "OpenShift Service Mesh 2.0",
    "fix_state" : "Affected",
    "package_name" : "servicemesh-grafana",
    "cpe" : "cpe:/a:redhat:service_mesh:2.0"
  }, {
    "product_name" : "OpenShift Service Mesh 2.0",
    "fix_state" : "Affected",
    "package_name" : "servicemesh-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:2.0"
  }, {
    "product_name" : "OpenShift Service Mesh 2.0",
    "fix_state" : "Affected",
    "package_name" : "servicemesh-prometheus",
    "cpe" : "cpe:/a:redhat:service_mesh:2.0"
  }, {
    "product_name" : "OpenShift Service Mesh 2.1",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-service-mesh/kiali-rhel8",
    "cpe" : "cpe:/a:redhat:service_mesh:2.1"
  }, {
    "product_name" : "OpenShift Service Mesh 2.1",
    "fix_state" : "Will not fix",
    "package_name" : "servicemesh",
    "cpe" : "cpe:/a:redhat:service_mesh:2.1"
  }, {
    "product_name" : "OpenShift Service Mesh 2.1",
    "fix_state" : "Will not fix",
    "package_name" : "servicemesh-grafana",
    "cpe" : "cpe:/a:redhat:service_mesh:2.1"
  }, {
    "product_name" : "OpenShift Service Mesh 2.1",
    "fix_state" : "Not affected",
    "package_name" : "servicemesh-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:2.1"
  }, {
    "product_name" : "OpenShift Service Mesh 2.1",
    "fix_state" : "Not affected",
    "package_name" : "servicemesh-prometheus",
    "cpe" : "cpe:/a:redhat:service_mesh:2.1"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Affected",
    "package_name" : "3scale-apicast-operator-container",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Affected",
    "package_name" : "3scale-operator-container",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Affected",
    "package_name" : "client_golang",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/acmesolver-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/agent-service-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/assisted-image-service-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/assisted-installer-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/cainjector-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/cert-policy-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/cluster-backup-rhel9-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/clusterclaims-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/cluster-curator-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/clusterlifecycle-state-metrics-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/cluster-proxy-addon-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/configmap-watcher-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/config-policy-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/discovery-rhel8-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/endpoint-monitoring-rhel8-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/endpoint-rhel8-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/gatekeeper-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/gatekeeper-rhel8-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/governance-policy-propagator-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/governance-policy-spec-sync-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/governance-policy-status-sync-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/governance-policy-template-sync-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/iam-policy-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/insights-metrics-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/klusterlet-addon-controller-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/klusterlet-addon-lease-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/kube-rbac-proxy-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/kube-state-metrics-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/lighthouse-agent-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/managedcluster-import-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/memcached-exporter-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/metrics-collector-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicloud-integrations-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicloud-manager-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multiclusterhub-repo-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multiclusterhub-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-observability-rhel9-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-application-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-channel-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-deployable-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-placementrule-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-subscription-release-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/multicluster-operators-subscription-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/node-exporter-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/observatorium-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/openshift-hive-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/placement-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/prometheus-alertmanager-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/prometheus-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/provider-credential-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/rbac-query-proxy-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/rcm-controller-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/registration-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/registration-rhel8-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/search-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/subctl-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/submariner-addon-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/submariner-gateway-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/submariner-rhel8-operator",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/thanos-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/volsync-mover-rclone-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/volsync-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "rhacm2/work-rhel8",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Under investigation",
    "package_name" : "thanos-receive-controller-container",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 3",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-docs-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 3",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:3"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 3",
    "fix_state" : "Under investigation",
    "package_name" : "advanced-cluster-security/rhacs-scanner-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:3"
  }, {
    "product_name" : "Red Hat AMQ Broker 7",
    "fix_state" : "Affected",
    "package_name" : "amq-broker-rhel8-operator-container",
    "cpe" : "cpe:/a:redhat:amq_broker:7"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "openshift-clients",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ceph Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "rhceph/rhceph-4-dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:ceph_storage:4"
  }, {
    "product_name" : "Red Hat Ceph Storage 5",
    "fix_state" : "Under investigation",
    "package_name" : "rhceph/rhceph-5-dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:ceph_storage:5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "buildah",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Out of support scope",
    "package_name" : "container-tools:2.0/buildah",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Out of support scope",
    "package_name" : "container-tools:2.0/podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Out of support scope",
    "package_name" : "container-tools:2.0/skopeo",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/buildah",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/conmon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/skopeo",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "buildah",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "conmon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "skopeo",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Will not fix",
    "package_name" : "atomic-enterprise-service-catalog",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Will not fix",
    "package_name" : "atomic-openshift",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Will not fix",
    "package_name" : "openshift3/grafana",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Not affected",
    "package_name" : "openshift3/ose-cluster-monitoring-operator",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Not affected",
    "package_name" : "openshift3/ose-kube-rbac-proxy",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Not affected",
    "package_name" : "openshift3/ose-prometheus-operator",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-enterprise-autoheal",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "assisted-installer-container",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "atomic-enterprise-service-catalog",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "cincinnati-operator-container",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "cri-o",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "machine-config-daemon",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/cnf-tests-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/compliance-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/dpu-network-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/file-integrity-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/metallb-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/metallb-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/numaresources-operator-bundle",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/oc-mirror-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-aws-cloud-controller-manager-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-aws-efs-csi-driver-container-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-aws-efs-csi-driver-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-aws-machine-controllers",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-azure-cloud-node-manager-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-azure-machine-controllers",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-cluster-api-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-authentication-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-cluster-baremetal-operator-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-config-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-dns-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-ingress-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-kube-apiserver-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-cluster-kube-descheduler-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-cluster-kube-descheduler-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-cluster-logging-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-machine-approver",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-nfd-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-cluster-openshift-apiserver-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-clusterresourceoverride-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-clusterresourceoverride-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-cluster-version-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-console-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-contour-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-coredns-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-csi-driver-manila-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-csi-external-attacher-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-csi-livenessprobe",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-csi-livenessprobe-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-csi-node-driver-registrar-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-descheduler",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-elasticsearch-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-etcd",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-gcp-machine-controllers-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-ghostunnel",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-grafana",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-hello-openshift-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-hypershift-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-ibm-cloud-controller-manager-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-image-customization-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-insights-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-k8s-prometheus-adapter",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-kube-rbac-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-kube-storage-version-migrator-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-libvirt-machine-controllers-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-local-storage-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Out of support scope",
    "package_name" : "openshift4/ose-local-storage-static-provisioner",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-logging-eventrouter",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-machine-api-provider-aws-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-machine-api-provider-azure-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-machine-api-provider-gcp-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-machine-api-provider-openstack-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-metering-ansible-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-metering-helm-container-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-multus-cni",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-node-feature-discovery-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-node-problem-detector-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-oauth-apiserver-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-oauth-proxy",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-oauth-server-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-openshift-apiserver-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-operator-registry",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift4/ose-ovirt-machine-controllers-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-powervs-machine-controllers-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-prometheus-node-exporter",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-ptp",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-ptp-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-service-ca-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-tools-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-vertical-pod-autoscaler-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-vertical-pod-autoscaler-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/special-resource-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift-compliance-operator-container",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift-file-integrity-operator-container",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "podman",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "poison-pill-container",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "skopeo",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform Assisted Installer 1",
    "fix_state" : "Affected",
    "package_name" : "rhai-tech-preview/assisted-installer-rhel8",
    "cpe" : "cpe:/a:redhat:assisted_installer:1"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "mcg",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "ocs4/cephcsi-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "ocs4/mcg-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "ocs4/ocs-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "ocs4/rook-ceph-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Under investigation",
    "package_name" : "ocs4/volume-replication-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 2",
    "fix_state" : "Not affected",
    "package_name" : "rhosdt/jaeger-query-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:2"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 2",
    "fix_state" : "Not affected",
    "package_name" : "rhosdt/jaeger-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:2"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 2",
    "fix_state" : "Affected",
    "package_name" : "rhosdt/opentelemetry-collector-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:2"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 2",
    "fix_state" : "Affected",
    "package_name" : "rhosdt/opentelemetry-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:2"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Will not fix",
    "package_name" : "openshift-gitops-1/applicationset-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/argocd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/gitops-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/gitops-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "cluster-network-addons-operator-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "cnv-containernetworking-plugins-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "hostpath-provisioner-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "hostpath-provisioner-operator-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "hyperconverged-cluster-operator-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "hyperconverged-cluster-webhook-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "kubemacpool-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "kubernetes-nmstate-handler-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "kubevirt",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "node-maintenance-operator-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "ovs-cni-plugin-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "virt-cdi-cloner-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "virt-launcher-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 2",
    "fix_state" : "Will not fix",
    "package_name" : "vm-import-virtv2v-container",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:2"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/cluster-network-addons-operator",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/hostpath-provisioner-rhel8",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/hostpath-provisioner-rhel8-operator",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/hyperconverged-cluster-webhook-rhel8",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/kubemacpool",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/kubernetes-nmstate-handler-rhel8",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/kubevirt-template-validator",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/libguestfs-tools",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Will not fix",
    "package_name" : "container-native-virtualization/node-maintenance-operator",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/virt-cdi-cloner",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/virt-launcher",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Will not fix",
    "package_name" : "container-native-virtualization/vm-import-virtv2v-rhel8",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.1",
    "fix_state" : "Not affected",
    "package_name" : "sg-core-container",
    "cpe" : "cpe:/a:redhat:openstack:16.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.1",
    "fix_state" : "Out of support scope",
    "package_name" : "smart-gateway-container",
    "cpe" : "cpe:/a:redhat:openstack:16.1"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Not affected",
    "package_name" : "osp-director-provisioner-container",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Not affected",
    "package_name" : "rhosp-rhel8/osp-director-downloader",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Not affected",
    "package_name" : "rhosp-rhel8-tech-preview/osp-director-operator",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay-bridge-operator",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/clair-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Under investigation",
    "package_name" : "quay/quay-bridge-operator-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/quay-builder-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/quay-container-security-operator-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/quay-operator-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Will not fix",
    "package_name" : "quay/quay-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Service Telemetry Framework 1.3 for RHEL 8",
    "fix_state" : "Will not fix",
    "package_name" : "stf/sg-core-rhel8",
    "cpe" : "cpe:/a:redhat:stf:1.3::el8"
  }, {
    "product_name" : "Service Telemetry Framework 1.4 for RHEL 8",
    "fix_state" : "Not affected",
    "package_name" : "stf/sg-core-rhel8",
    "cpe" : "cpe:/a:redhat:stf:1.4::el8"
  }, {
    "product_name" : "Service Telemetry Framework 1.5",
    "fix_state" : "Will not fix",
    "package_name" : "stf/sg-core-rhel8",
    "cpe" : "cpe:/a:redhat:stf:1.5"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2022-21698\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-21698\nhttps://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p" ],
  "name" : "CVE-2022-21698",
  "csaw" : false
}