{
  "threat_severity" : "Moderate",
  "public_date" : "2024-03-09T00:00:00Z",
  "bugzilla" : {
    "description" : "jose-go: improper handling of highly compressed data",
    "id" : "2268854",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2268854"
  },
  "cvss3" : {
    "cvss3_base_score" : "4.3",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
    "status" : "verified"
  },
  "cwe" : "CWE-409",
  "details" : [ "Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.", "A vulnerability was found in Jose due to improper handling of highly compressed data. This issue could allow an attacker to send a JWE containing compressed data that uses large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti." ],
  "affected_release" : [ {
    "product_name" : "OADP-1.3-RHEL-9",
    "release_date" : "2024-04-16T00:00:00Z",
    "advisory" : "RHSA-2024:1859",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1.3::el9",
    "package" : "oadp/oadp-velero-plugin-rhel9:1.3.1-16"
  }, {
    "product_name" : "OpenShift Custom Metrics Autoscaler 2",
    "release_date" : "2024-04-15T00:00:00Z",
    "advisory" : "RHSA-2024:1812",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8:2.12.1-376"
  }, {
    "product_name" : "OpenShift Custom Metrics Autoscaler 2",
    "release_date" : "2024-04-15T00:00:00Z",
    "advisory" : "RHSA-2024:1812",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel8:2.12.1-376"
  }, {
    "product_name" : "OpenShift Custom Metrics Autoscaler 2",
    "release_date" : "2024-04-15T00:00:00Z",
    "advisory" : "RHSA-2024:1812",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle:2.12.1-376"
  }, {
    "product_name" : "OpenShift Custom Metrics Autoscaler 2",
    "release_date" : "2024-04-15T00:00:00Z",
    "advisory" : "RHSA-2024:1812",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8:2.12.1-376"
  }, {
    "product_name" : "OpenShift Custom Metrics Autoscaler 2",
    "release_date" : "2024-04-15T00:00:00Z",
    "advisory" : "RHSA-2024:1812",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.0::el8",
    "package" : "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8-operator:2.12.1-376"
  }, {
    "product_name" : "OpenShift-Pipelines-1.15-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHEA-2024:4022",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1.15::el8",
    "package" : "openshift-pipelines-client-0:1.15.0-11496.el8"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-cli-rhel9:v2.12.0-17"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-cluster-permission-rhel9:v2.12.0-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-governance-policy-addon-controller-rhel9:v2.12.0-27"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-governance-policy-framework-addon-rhel9:v2.12.0-20"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-grafana-rhel9:v2.12.0-17"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-multicluster-observability-addon-rhel9:v2.12.0-20"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-must-gather-rhel9:v2.12.0-35"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-operator-bundle:v2.12.0-114"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-prometheus-config-reloader-rhel9:v2.12.0-16"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-prometheus-rhel9:v2.12.0-16"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-search-indexer-rhel9:v2.12.0-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-search-v2-api-rhel9:v2.12.0-15"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-search-v2-rhel9:v2.12.0-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-siteconfig-rhel9:v2.12.0-24"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/acm-volsync-addon-controller-rhel9:v2.12.0-22"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/cert-policy-controller-rhel9:v2.12.0-22"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/cluster-backup-rhel9-operator:v2.12.0-37"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/config-policy-controller-rhel9:v2.12.0-31"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/console-rhel9:v2.12.0-68"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/endpoint-monitoring-rhel9-operator:v2.12.0-39"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/governance-policy-propagator-rhel9:v2.12.0-29"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/grafana-dashboard-loader-rhel9:v2.12.0-39"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/insights-client-rhel9:v2.12.0-18"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/insights-metrics-rhel9:v2.12.0-18"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/klusterlet-addon-controller-rhel9:v2.12.0-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/kube-rbac-proxy-rhel9:v2.12.0-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/kube-state-metrics-rhel9:v2.12.0-17"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/memcached-exporter-rhel9:v2.12.0-10"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/memcached-rhel9:v2.12.0-7"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/metrics-collector-rhel9:v2.12.0-39"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/multicloud-integrations-rhel9:v2.12.0-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/multiclusterhub-rhel9:v2.12.0-51"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/multicluster-observability-rhel9-operator:v2.12.0-39"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/multicluster-operators-application-rhel9:v2.12.0-14"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/multicluster-operators-channel-rhel9:v2.12.0-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/multicluster-operators-subscription-rhel9:v2.12.0-24"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/node-exporter-rhel9:v2.12.0-10"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/observatorium-rhel9:v2.12.0-16"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/observatorium-rhel9-operator:v2.12.0-17"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/prometheus-alertmanager-rhel9:v2.12.0-12"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/prometheus-rhel9:v2.12.0-14"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/rbac-query-proxy-rhel9:v2.12.0-39"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/search-collector-rhel9:v2.12.0-21"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/submariner-addon-rhel9:v2.12.0-24"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/thanos-receive-controller-rhel9:v2.12.0-13"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9",
    "release_date" : "2024-11-06T00:00:00Z",
    "advisory" : "RHSA-2024:8974",
    "cpe" : "cpe:/a:redhat:acm:2.12::el9",
    "package" : "rhacm2/thanos-rhel9:v2.12.0-18"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4.4",
    "release_date" : "2024-03-28T00:00:00Z",
    "advisory" : "RHSA-2024:1570",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4.4::el8",
    "package" : "advanced-cluster-security/rhacs-main-rhel8:4.4.0-17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2024-05-22T00:00:00Z",
    "advisory" : "RHSA-2024:3254",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "container-tools:rhel8-8100020240419145834.afee755d"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2024-06-18T00:00:00Z",
    "advisory" : "RHSA-2024:3968",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "container-tools:rhel8-8100020240610105040.afee755d"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2549",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "skopeo-2:1.14.3-2.el9_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2024-06-11T00:00:00Z",
    "advisory" : "RHSA-2024:3826",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "podman-4:4.9.4-4.el9_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2024-06-11T00:00:00Z",
    "advisory" : "RHSA-2024:3827",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "buildah-2:1.33.7-2.el9_4"
  }, {
    "product_name" : "Red Hat Migration Toolkit for Containers 1.7",
    "release_date" : "2024-05-01T00:00:00Z",
    "advisory" : "RHSA-2024:2639",
    "cpe" : "cpe:/a:redhat:rhmt:1.7::el8",
    "package" : "rhmtc/openshift-velero-plugin-rhel8:v1.7.15-9"
  }, {
    "product_name" : "Red Hat Migration Toolkit for Containers 1.8",
    "release_date" : "2024-09-26T00:00:00Z",
    "advisory" : "RHSA-2024:7164",
    "cpe" : "cpe:/a:redhat:rhmt:1.8::el8",
    "package" : "rhmtc/openshift-migration-controller-rhel8:v1.8.4-22"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-04-03T00:00:00Z",
    "advisory" : "RHSA-2024:1574",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "cri-o-0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-05-16T00:00:00Z",
    "advisory" : "RHSA-2024:2784",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "skopeo-2:1.9.4-4.3.rhaos4.12.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-05-30T00:00:00Z",
    "advisory" : "RHSA-2024:3349",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-aws-pod-identity-webhook-rhel8:v4.12.0-202405141537.p0.g31917a5.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-05-30T00:00:00Z",
    "advisory" : "RHSA-2024:3349",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-cloud-credential-operator:v4.12.0-202405141537.p0.g54058b5.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-05-30T00:00:00Z",
    "advisory" : "RHSA-2024:3351",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "cri-o-0:1.25.5-19.2.rhaos4.12.gitba93e0a.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-05-30T00:00:00Z",
    "advisory" : "RHSA-2024:3351",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "podman-3:4.4.1-4.2.rhaos4.12.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.12",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:4006",
    "cpe" : "cpe:/a:redhat:openshift:4.12::el8",
    "package" : "openshift4/ose-operator-registry:v4.12.0-202406180807.p0.gea15615.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-03-27T00:00:00Z",
    "advisory" : "RHSA-2024:1456",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "cri-o-0:1.26.5-10.rhaos4.13.gita08b329.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-05-02T00:00:00Z",
    "advisory" : "RHSA-2024:2049",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "skopeo-2:1.11.3-0.2.rhaos4.13.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2875",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-aws-pod-identity-webhook-rhel8:v4.13.0-202405141537.p0.gae01a27.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2875",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-cloud-credential-operator:v4.13.0-202405151107.p0.g02ab813.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2877",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "cri-o-0:1.26.5-15.2.rhaos4.13.gitb742e63.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2877",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "podman-3:4.4.1-7.3.rhaos4.13.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.13",
    "release_date" : "2024-07-17T00:00:00Z",
    "advisory" : "RHSA-2024:4484",
    "cpe" : "cpe:/a:redhat:openshift:4.13::el8",
    "package" : "openshift4/ose-operator-registry:v4.13.0-202407081338.p0.gd8cfe86.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-04-03T00:00:00Z",
    "advisory" : "RHSA-2024:1567",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "cri-o-0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-05-02T00:00:00Z",
    "advisory" : "RHSA-2024:2054",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "skopeo-2:1.11.3-0.1.rhaos4.14.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-05-09T00:00:00Z",
    "advisory" : "RHSA-2024:2672",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "cri-o-0:1.27.6-2.rhaos4.14.gitb3bd0bf.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-05-09T00:00:00Z",
    "advisory" : "RHSA-2024:2672",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "podman-3:4.4.1-13.4.rhaos4.14.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2869",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ose-aws-pod-identity-webhook-rhel8:v4.14.0-202405141639.p0.g2c864ca.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2869",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ose-azure-workload-identity-webhook-rhel8:v4.14.0-202405141639.p0.gbcb88d9.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-05-23T00:00:00Z",
    "advisory" : "RHSA-2024:2869",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ose-cloud-credential-operator:v4.14.0-202405141639.p0.g67fe51e.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-06-10T00:00:00Z",
    "advisory" : "RHSA-2024:3523",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ose-operator-registry:v4.14.0-202405222237.p0.g5e8dd92.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-06-26T00:00:00Z",
    "advisory" : "RHSA-2024:4010",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ose-telemeter:v4.14.0-202406180839.p0.g7e8f45b.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.14",
    "release_date" : "2024-10-23T00:00:00Z",
    "advisory" : "RHSA-2024:8235",
    "cpe" : "cpe:/a:redhat:openshift:4.14::el8",
    "package" : "openshift4/ose-openshift-controller-manager-rhel8:v4.14.0-202410091239.p0.gf4cf331.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-04-02T00:00:00Z",
    "advisory" : "RHSA-2024:1563",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "cri-o-0:1.28.4-8.rhaos4.15.git24f50b9.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-02T00:00:00Z",
    "advisory" : "RHSA-2024:2071",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "skopeo-2:1.11.3-0.1.rhaos4.15.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-09T00:00:00Z",
    "advisory" : "RHSA-2024:2669",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "cri-o-0:1.28.6-2.rhaos4.15.git77bbb1c.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-09T00:00:00Z",
    "advisory" : "RHSA-2024:2669",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "podman-3:4.4.1-23.2.rhaos4.15.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-15T00:00:00Z",
    "advisory" : "RHSA-2024:2773",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-azure-workload-identity-webhook-rhel8:v4.15.0-202405080536.p0.g2333b7f.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-15T00:00:00Z",
    "advisory" : "RHSA-2024:2773",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-operator-registry-rhel9:v4.15.0-202405070106.p0.g50f148e.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-15T00:00:00Z",
    "advisory" : "RHSA-2024:2776",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift-clients-0:4.15.0-202405021207.p0.g7693229.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-21T00:00:00Z",
    "advisory" : "RHSA-2024:2865",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-aws-pod-identity-webhook-rhel9:v4.15.0-202405092349.p0.g1338503.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-21T00:00:00Z",
    "advisory" : "RHSA-2024:2865",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-cloud-credential-operator:v4.15.0-202405141637.p0.gaf5662f.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-06-26T00:00:00Z",
    "advisory" : "RHSA-2024:4041",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-docker-builder:v4.15.0-202406180807.p0.gb98fb65.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-06-26T00:00:00Z",
    "advisory" : "RHSA-2024:4041",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-telemeter-rhel9:v4.15.0-202406132106.p0.g82cd643.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-10-31T00:00:00Z",
    "advisory" : "RHSA-2024:8425",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-agent-installer-api-server-rhel8:v4.15.0-202410230304.p0.g213c579.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-10-31T00:00:00Z",
    "advisory" : "RHSA-2024:8425",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-agent-installer-node-agent-rhel9:v4.15.0-202410230304.p0.g366295f.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-10-31T00:00:00Z",
    "advisory" : "RHSA-2024:8425",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el8",
    "package" : "openshift4/ose-agent-installer-orchestrator-rhel8:v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-05-29T00:00:00Z",
    "advisory" : "RHSA-2024:3327",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el9",
    "package" : "openshift4/ose-telemeter-rhel9:v4.15.0-202405220335.p0.g4dce8ff.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.15",
    "release_date" : "2024-10-02T00:00:00Z",
    "advisory" : "RHSA-2024:7179",
    "cpe" : "cpe:/a:redhat:openshift:4.15::el9",
    "package" : "openshift4/ose-openshift-controller-manager-rhel9:v4.15.0-202409231334.p0.gaa43a06.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:0041",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-aws-pod-identity-webhook-rhel9:v4.16.0-202406131906.p0.g746491a.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:0041",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-azure-workload-identity-webhook-rhel9:v4.16.0-202406131906.p0.g4aca092.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:0041",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-cloud-credential-rhel9-operator:v4.16.0-202406131906.p0.g48b287d.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:0041",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-docker-builder-rhel9:v4.16.0-202406131906.p0.gca2b36a.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:0041",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-operator-registry-rhel9:v4.16.0-202406131906.p0.g1aacee6.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-06-27T00:00:00Z",
    "advisory" : "RHSA-2024:0041",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-telemeter-rhel9:v4.16.0-202406131906.p0.g6ab43e4.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-09-19T00:00:00Z",
    "advisory" : "RHSA-2024:6687",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-docker-builder-rhel9:v4.16.0-202409101737.p1.gfee4b58.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-10-24T00:00:00Z",
    "advisory" : "RHSA-2024:8260",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-agent-installer-api-server-rhel9:v4.16.0-202410172201.p0.g7ae324d.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-10-24T00:00:00Z",
    "advisory" : "RHSA-2024:8260",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-agent-installer-node-agent-rhel9:v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.16",
    "release_date" : "2024-10-24T00:00:00Z",
    "advisory" : "RHSA-2024:8260",
    "cpe" : "cpe:/a:redhat:openshift:4.16::el9",
    "package" : "openshift4/ose-agent-installer-orchestrator-rhel9:v4.16.0-202410172201.p0.g0c46e51.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2024-10-01T00:00:00Z",
    "advisory" : "RHSA-2024:3718",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-docker-builder-rhel9:v4.17.0-202409122005.p1.gcfcf3bd.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2024-10-01T00:00:00Z",
    "advisory" : "RHSA-2024:3718",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-openshift-controller-manager-rhel9:v4.17.0-202409182235.p0.g7682a61.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2024-10-23T00:00:00Z",
    "advisory" : "RHSA-2024:8229",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-agent-installer-api-server-rhel9:v4.17.0-202410160306.p0.gb2babb9.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2024-10-23T00:00:00Z",
    "advisory" : "RHSA-2024:8229",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-agent-installer-node-agent-rhel9:v4.17.0-202410112132.p0.g29149b7.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2024-10-23T00:00:00Z",
    "advisory" : "RHSA-2024:8229",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-agent-installer-orchestrator-rhel9:v4.17.0-202410151905.p0.g9614e8b.assembly.stream.el9"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/grafana-rhel8:2.4.10-3"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/istio-cni-rhel8:2.4.10-4"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/istio-must-gather-rhel8:2.4.10-4"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/kiali-rhel8:1.65.15-3"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/pilot-rhel8:2.4.10-4"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/proxyv2-rhel8:2.4.10-3"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.4 for RHEL 8",
    "release_date" : "2024-09-03T00:00:00Z",
    "advisory" : "RHSA-2024:6209",
    "cpe" : "cpe:/a:redhat:service_mesh:2.4::el8",
    "package" : "openshift-service-mesh/ratelimit-rhel8:2.4.10-3"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/grafana-rhel8:2.5.1-2"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/istio-cni-rhel8:2.5.1-8"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/istio-must-gather-rhel8:2.5.1-3"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/istio-rhel8-operator:2.5.1-7"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel8:1.73.7-2"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/kiali-rhel8:1.73.7-5"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/kiali-rhel8-operator:1.73.7-4"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/pilot-rhel8:2.5.1-8"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/proxyv2-rhel8:2.5.1-8"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.5 for RHEL 8",
    "release_date" : "2024-04-22T00:00:00Z",
    "advisory" : "RHSA-2024:1946",
    "cpe" : "cpe:/a:redhat:service_mesh:2.5::el8",
    "package" : "openshift-service-mesh/ratelimit-rhel8:2.5.1-2"
  }, {
    "product_name" : "RHEL-9-CNV-4.16",
    "release_date" : "2024-07-10T00:00:00Z",
    "advisory" : "RHSA-2024:4455",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4.16::el9",
    "package" : "container-native-virtualization/virt-cdi-cloner-rhel9:v4.16.0-169"
  }, {
    "product_name" : "RHODF-4.16-RHEL-9",
    "release_date" : "2024-07-17T00:00:00Z",
    "advisory" : "RHSA-2024:4591",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/mcg-rhel9-operator:v4.16.0-38"
  }, {
    "product_name" : "RHODF-4.16-RHEL-9",
    "release_date" : "2024-07-17T00:00:00Z",
    "advisory" : "RHSA-2024:4591",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-cli-rhel9:v4.16.0-44"
  }, {
    "product_name" : "RHODF-4.16-RHEL-9",
    "release_date" : "2024-07-17T00:00:00Z",
    "advisory" : "RHSA-2024:4591",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:v4.16.0-19"
  }, {
    "product_name" : "RHODF-4.16-RHEL-9",
    "release_date" : "2024-07-17T00:00:00Z",
    "advisory" : "RHSA-2024:4591",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:v4.16.0-66"
  }, {
    "product_name" : "RHOL-5.9-RHEL-9",
    "release_date" : "2024-05-01T00:00:00Z",
    "advisory" : "RHSA-2024:2096",
    "cpe" : "cpe:/a:redhat:logging:5.9::el9",
    "package" : "openshift-logging/lokistack-gateway-rhel9:v0.1.0-520"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/client-kn-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-controller-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-istio-controller-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-controller-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-post-install-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-receiver-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-kafka-broker-webhook-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-mtbroker-filter-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-mtbroker-ingress-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-mtchannel-broker-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-mtping-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-storage-version-migration-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/eventing-webhook-rhel8:1.12.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/func-utils-rhel8:1.33.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/ingress-rhel8-operator:1.33.0-5"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/knative-rhel8-operator:1.33.0-5"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/kn-cli-artifacts-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/kourier-control-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/net-istio-controller-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/net-istio-webhook-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serverless-operator-bundle:1.33.0-6"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serverless-rhel8-operator:1.33.0-5"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-activator-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-autoscaler-hpa-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-autoscaler-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-controller-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-queue-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-storage-version-migration-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/serving-webhook-rhel8:1.12.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1/svls-must-gather-rhel8:1.33.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8:1.33.0-4"
  }, {
    "product_name" : "RHOSS-1.33-RHEL-8",
    "release_date" : "2024-06-20T00:00:00Z",
    "advisory" : "RHSA-2024:4028",
    "cpe" : "cpe:/a:redhat:openshift_serverless:1.33::el8",
    "package" : "openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8:1.12.0-4"
  }, {
    "product_name" : "cert-manager operator for Red Hat OpenShift 1.15",
    "release_date" : "2025-01-21T00:00:00Z",
    "advisory" : "RHSA-2025:0536",
    "cpe" : "cpe:/a:redhat:cert_manager:1.15::el9",
    "package" : "cert-manager/jetstack-cert-manager-acmesolver-rhel9:sha256:2e4eae54c75591d3dacd8165159397a63d6f695a1f733d12623652705ad40173"
  }, {
    "product_name" : "cert-manager operator for Red Hat OpenShift 1.15",
    "release_date" : "2025-01-21T00:00:00Z",
    "advisory" : "RHSA-2025:0536",
    "cpe" : "cpe:/a:redhat:cert_manager:1.15::el9",
    "package" : "cert-manager/jetstack-cert-manager-rhel9:sha256:30d0113003152532d29a845550a78454a1f88099e90b475711ab74901560c67e"
  } ],
  "package_state" : [ {
    "product_name" : "cert-manager Operator for Red Hat OpenShift",
    "fix_state" : "Not affected",
    "package_name" : "jetstack-cert-manager-container",
    "cpe" : "cpe:/a:redhat:cert_manager:1"
  }, {
    "product_name" : "Migration Toolkit for Applications 6",
    "fix_state" : "Will not fix",
    "package_name" : "mta/mta-hub-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:6"
  }, {
    "product_name" : "Migration Toolkit for Applications 6",
    "fix_state" : "Will not fix",
    "package_name" : "mta/mta-windup-addon-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:6"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/agent-service-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/assisted-installer-agent-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/assisted-installer-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/console-mce-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/hypershift-cli-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/kube-rbac-proxy-mce-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/multicluster-engine-console-mce-rhel8",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Not affected",
    "package_name" : "oadp/oadp-kubevirt-velero-plugin-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Affected",
    "package_name" : "oadp/oadp-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Not affected",
    "package_name" : "oadp/oadp-velero-plugin-for-aws-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Not affected",
    "package_name" : "oadp/oadp-velero-plugin-for-csi-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Not affected",
    "package_name" : "oadp/oadp-velero-plugin-for-gcp-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift API for Data Protection",
    "fix_state" : "Not affected",
    "package_name" : "oadp/oadp-velero-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_api_data_protection:1"
  }, {
    "product_name" : "OpenShift Developer Tools and Services",
    "fix_state" : "Will not fix",
    "package_name" : "ocp-tools-4/jenkins-rhel8",
    "cpe" : "cpe:/a:redhat:ocp_tools"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Not affected",
    "package_name" : "jose-go",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Service Mesh 2",
    "fix_state" : "Affected",
    "package_name" : "openshift-service-mesh/kiali-rhel8",
    "cpe" : "cpe:/a:redhat:service_mesh:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 3",
    "fix_state" : "Out of support scope",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:3"
  }, {
    "product_name" : "Red Hat Ceph Storage 5",
    "fix_state" : "Affected",
    "package_name" : "rhceph/rhceph-5-dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:ceph_storage:5"
  }, {
    "product_name" : "Red Hat Ceph Storage 6",
    "fix_state" : "Will not fix",
    "package_name" : "rhceph/rhceph-6-dashboard-rhel9",
    "cpe" : "cpe:/a:redhat:ceph_storage:6"
  }, {
    "product_name" : "Red Hat Ceph Storage 7",
    "fix_state" : "Affected",
    "package_name" : "rhceph/grafana-rhel9",
    "cpe" : "cpe:/a:redhat:ceph_storage:7"
  }, {
    "product_name" : "Red Hat Developer Hub",
    "fix_state" : "Not affected",
    "package_name" : "rhdh/rhdh-hub-rhel9",
    "cpe" : "cpe:/a:redhat:rhdh:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "jose",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/buildah",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/conmon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "container-tools:4.0/skopeo",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "jose",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Will not fix",
    "package_name" : "osbuild-composer",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "conmon",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "jose",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Will not fix",
    "package_name" : "osbuild-composer",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Out of support scope",
    "package_name" : "atomic-openshift",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 3.11",
    "fix_state" : "Out of support scope",
    "package_name" : "openshift-external-storage",
    "cpe" : "cpe:/a:redhat:openshift:3.11"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "conmon",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "microshift",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/oc-mirror-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-agent-installer-csr-approver-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-cluster-authentication-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-console",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Will not fix",
    "package_name" : "openshift4/ose-contour-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-hypershift-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-kube-rbac-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-libvirt-machine-controllers-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-machine-config-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-network-interface-bond-cni-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-node-feature-discovery-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-oauth-server-rhel8",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-tests",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Not affected",
    "package_name" : "openshift4/ose-vertical-pod-autoscaler-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform Assisted Installer 1",
    "fix_state" : "Affected",
    "package_name" : "rhai-tech-preview/assisted-installer-agent-rhel8",
    "cpe" : "cpe:/a:redhat:assisted_installer:1"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform Assisted Installer 1",
    "fix_state" : "Affected",
    "package_name" : "rhai-tech-preview/assisted-installer-rhel8",
    "cpe" : "cpe:/a:redhat:assisted_installer:1"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Out of support scope",
    "package_name" : "mcg",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Out of support scope",
    "package_name" : "ocs4/cephcsi-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Out of support scope",
    "package_name" : "ocs4/mcg-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Will not fix",
    "package_name" : "ocs4/ocs-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Will not fix",
    "package_name" : "ocs4/rook-ceph-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Container Storage 4",
    "fix_state" : "Will not fix",
    "package_name" : "ocs4/volume-replication-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_container_storage:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Not affected",
    "package_name" : "mcg",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Affected",
    "package_name" : "odf4/cephcsi-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Affected",
    "package_name" : "odf4/mcg-cli-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Will not fix",
    "package_name" : "odf4/ocs-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4",
    "fix_state" : "Will not fix",
    "package_name" : "odf4/odf-rhel9-operator",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4"
  }, {
    "product_name" : "Red Hat OpenShift Data Science (RHODS)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhods/odh-dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_data_science"
  }, {
    "product_name" : "Red Hat OpenShift Data Science (RHODS)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhods/odh-ml-pipelines-cache-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_data_science"
  }, {
    "product_name" : "Red Hat OpenShift Data Science (RHODS)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhods/odh-operator-base-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_data_science"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Not affected",
    "package_name" : "devspaces/code-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Not affected",
    "package_name" : "devspaces/dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Will not fix",
    "package_name" : "devspaces/devspaces-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces",
    "fix_state" : "Will not fix",
    "package_name" : "devspaces/traefik-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 2",
    "fix_state" : "Affected",
    "package_name" : "rhosdt/tempo-gateway-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:2"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 3",
    "fix_state" : "Affected",
    "package_name" : "rhosdt/tempo-gateway-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/argocd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/dex-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift on AWS",
    "fix_state" : "Affected",
    "package_name" : "rosa",
    "cpe" : "cpe:/a:redhat:openshift_service_on_aws:1"
  }, {
    "product_name" : "Red Hat Openshift Sandboxed Containers",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-sandboxed-containers/osc-rhel8-operator",
    "cpe" : "cpe:/a:redhat:openshift_sandboxed_containers:1"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Not affected",
    "package_name" : "container-native-virtualization/virt-cdi-cloner",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 16.2",
    "fix_state" : "Will not fix",
    "package_name" : "osp-director-provisioner-container",
    "cpe" : "cpe:/a:redhat:openstack:16.2"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/clair-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/quay-builder-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Not affected",
    "package_name" : "quay/quay-operator-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Affected",
    "package_name" : "quay/quay-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Storage 3",
    "fix_state" : "Out of support scope",
    "package_name" : "rhgs3/rhgs-gluster-block-prov-rhel7",
    "cpe" : "cpe:/a:redhat:storage:3"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2024-28180\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-28180\nhttps://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g" ],
  "name" : "CVE-2024-28180",
  "mitigation" : {
    "value" : "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
    "lang" : "en:us"
  },
  "csaw" : false
}