Sigstore Timestamp Authority allocates excessive memory during request parsing
sigstore · timestamp-authority
7.5HighCVSS 3.1
Recommended action
Within 7 days
High technical severity; prioritise exposed affected systems while verifying vendor guidance.
Patch available
Direct vendor intelligence
Authoritative vendor CSAF and VEX advisories
Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.
1 current
CVE-2025-66564 · CSAF 2.0 · revision 3 · finalRed Hat Product Securitygithub.com/sigstore/timestamp-authority: Sigstore Timestamp Authority: Denial of Service via excessive OID or Content-Type header parsing
18 known affected
The vendor explicitly identifies these products as affected by this CVE.
openshift-pipelines-client.src as a component of OpenShift Pipelines
openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines
openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines
openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines
openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines
openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless
advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4
Summary
A flaw was found in Sigstore Timestamp Authority. This vulnerability allows a denial of service via excessive memory allocation when processing a specially crafted Object Identifier or Content-Type header.
Remediation
If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release.
Optional official sources
National CERT insights ?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.
Select the national-authority views to include. The exact source language is shown on each matched advisory. Your choice is remembered on this device and encoded in the shareable URL.
Official European source
ENISA European Vulnerability Database
Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.
1 current
ENISA EUVD identifier
EUVD-2025-201319
No EUVD known-exploited evidence
ENISA has published the identifier mapping but no EUVD description has been stored yet.
EUVD state
Present in the current official mapping
Known exploitation
Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score
Not supplied in the stored EUVD record
Advisory evidence
No linked advisory details stored yet
Recommended actionWithin 7 days
High technical severity; prioritise exposed affected systems while verifying vendor guidance.
Patch available
01
What, why and how
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.
What
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.
Why
The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is asymmetric.
How
An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.
What
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.
Why
The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is asymmetric.
How
An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.
02
Exploit reality and attack path
CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.
Observed exploitation ?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.No confirmed evidence
No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.
Public PoC / exploit material ?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.None recorded
No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.
Likely attack path
a network path → Asymmetric Resource Consumption (Amplification) → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface
Network
Privileges required
None: unauthenticated exploitation is possible
User interaction
None
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Unchanged: impact remains within the vulnerable component's security authority
Weakness ?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-405: Asymmetric Resource Consumption (Amplification). The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is asymmetric.
CVSS vector ?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.SUnchangedScope: The security impact remains within the vulnerable component's authority.CNoneConfidentiality impact: No direct loss is represented by this metric.INoneIntegrity impact: No direct loss is represented by this metric.AHighAvailability impact: A successful attack can cause a major loss.
Post-exploitation / living off the land
No specific living-off-the-land technique is confirmed in the structured sources. Monitor normal administration tools for activity inconsistent with the affected service's baseline.
NetworkUnauthenticatedCWE-405
A
Official authority intelligence
Only matched European and national findings are included. Language selectors and unavailable sources are omitted.
Operational remediation based on structured source evidence.
Status ?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
If you are using an earlier version of RHACS, you are advised to upgrade to the version of RHACS mentioned in the synopsis and release notes in order to take advantage of the enhancements, bug fixes, and/or security patches in the release.
Workaround
No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.
04
Evidence and provenance
Published 4 Dec 2025 · Last source change 5 Dec 2025, 14:55 UTC · CWE-405 · Asymmetric Resource Consumption (Amplification)
CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source ?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.FIRST · tracked since 2026-08-14
European sourceENISA EUVD · EUVD-2025-201319
Product sourceVendor CSAF · Red Hat Product Security
Remediation sourceVendor CSAF · Red Hat Product Security
CWE sourceCNA
NVD statusNVD enriched
Core structured fields are present and their contributing authorities are shown above.
Affected versionsThe structured affected or fixed version information changed.
Before
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/compliance/openshift-security-profiles-operator-bundle@sha256:4604d631307390e44fea4729d87470a32f294f380b4c7c9448a8e1a82ccec5b7_amd64 as a component of OpenShift Security Profiles Operator 1; registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator@sha256:66c78e05a610eb31b8a350502b778305e53da9576ae124a3eb7ab3cc29595297_ppc64le as a component of OpenShift Security Profiles Operator 1; registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator@sha256:e599c020744224294ed24d028ad1c5f4cca1192d9d487517286a6b7591d80f54_amd64 as a component of OpenShift Security Profiles Operator 1; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
After
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:ef571581dc01c754dce5ca1dbd360fe86800c14853ce3f535a51d0f438467597_s390x as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64 as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
Affected versionsThe structured affected or fixed version information changed.
Before
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:ef571581dc01c754dce5ca1dbd360fe86800c14853ce3f535a51d0f438467597_s390x as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64 as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
After
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/compliance/openshift-security-profiles-operator-bundle@sha256:4604d631307390e44fea4729d87470a32f294f380b4c7c9448a8e1a82ccec5b7_amd64 as a component of OpenShift Security Profiles Operator 1; registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator@sha256:66c78e05a610eb31b8a350502b778305e53da9576ae124a3eb7ab3cc29595297_ppc64le as a component of OpenShift Security Profiles Operator 1; registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator@sha256:e599c020744224294ed24d028ad1c5f4cca1192d9d487517286a6b7591d80f54_amd64 as a component of OpenShift Security Profiles Operator 1; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
Affected versionsThe structured affected or fixed version information changed.
Before
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:ef571581dc01c754dce5ca1dbd360fe86800c14853ce3f535a51d0f438467597_s390x as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64 as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
After
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:ef571581dc01c754dce5ca1dbd360fe86800c14853ce3f535a51d0f438467597_s390x as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64 as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
Affected versionsThe structured affected or fixed version information changed.
Before
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:ef571581dc01c754dce5ca1dbd360fe86800c14853ce3f535a51d0f438467597_s390x as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64 as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
After
openshift-pipelines-client.src as a component of OpenShift Pipelines; openshift-pipelines/pipelines-cli-tkn-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-opc-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-bundle as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-proxy-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel8 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-operator-webhook-rhel9 as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel8-operator as a component of OpenShift Pipelines; openshift-pipelines/pipelines-rhel9-operator as a component of OpenShift Pipelines; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; advanced-cluster-security/rhacs-operator-bundle as a component of Red Hat Advanced Cluster Security 4; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/spiffe-spire-server-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle as a component of Zero Trust Workload Identity Manager - Tech Preview; zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview · Fixed: registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2b5ba43a096f738c776e4fc95ac5afabbe1b80826c7350f85f0ca5987f412406_arm64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8_amd64 as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044_s390x as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019_ppc64le as a component of Red Hat Advanced Cluster Security 4.8; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:896bba113fa4ba5eab3bc944d58f7492b55945e2802845edee9362b0682ab419_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dea9e54e863bb2694aec735efa084c60f0083f02f749388aaf872067629a4589_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:e87ce042d9afb90c643de99cfaa98314230a2d9a01ad1230cd0596413991f4f5_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1dceed562203416b6d853e66402a2ec69370a53cc119953aeb442288ecebfa4f_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1e9116742efaed46b4b93ba1ff8eb026ffa5bbe5146690d020389b95bec77051_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:2d7d654755857e5a164827f2bbc022d1c23f7229b4164faa5c61e852c1706800_amd64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:6f0060cfb71c9ee2788f2bcebd1d9aa40e337c10921a4c631c0119c80721b539_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:817f1ffbf4d8917fdb02f33a5ffd72e16f73952897356cb4d21f1daf1b6e3d88_arm64 as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e_ppc64le as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:b6764d281ee6620dbe9b825dc0d0f5e03bc1b2c1a440ccd28a159eb8cd3e2166_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4_s390x as a component of Red Hat Advanced Cluster Security for Kubernetes 4.9; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:0cb744cb7946d857a2cffec641fcbc994e77ddc8d4a5b14c17a28621f4a0a4a9_arm64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:416c99f02abb6274fc87b2599e96b90e74e7a94c28806629c2b98fb2dc7e2afc_ppc64le as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d71dc72648f45660ae1fd98acac0f1876540cac853f5c097ab85c3a5f2c2084f_s390x as a component of Red Hat OpenShift Pipelines 1.15; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:1ee6048f584257edcbc764ae87f6375e6ce2d25caf3cc8f98fed981e197816bd_arm64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:6a0d1f472283c686e438dbfbeec826db9d7d95f45f92842c4073f70704860d2f_amd64 as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:bbb93e9ce23fd650f5b19df958390c951c38b72de02c5fec9cfbb3b801e8312f_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:ef571581dc01c754dce5ca1dbd360fe86800c14853ce3f535a51d0f438467597_s390x as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le as a component of Red Hat OpenShift Pipelines 1.2; registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64 as a component of Red Hat OpenShift Pipelines 1.2; and 11 more
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
