# CVE-2024-12085: Rsync: info leak via uninitialized stack contents

Status: published. Published: 2025-01-14. Updated: 2026-11-10.

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

## Remediation

- workaround: Seeing as this vulnerability relies on information leakage coming from the presence of data in the uninitialized memory of the `sum2` buffer, a potential mitigation involves compiling rsync with the `-ftrivial-auto-var-init=zero` option set. This mitigates the issue because it initializes the `sum2` variable's memory with zeroes to prevent uninitialized memory disclosure. (source: CNA: redhat)

## Affected products and versions

-  /  (rsync): ≥ 0; ≤ 3.3.0 (affected, semver). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (rsync): ≥ 0:3.4.1-2.el10; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION (rsync): ≥ 0:3.0.6-12.el6_10.1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support (rsync): ≥ 0:3.1.2-12.el7_9.1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (rsync): ≥ 0:3.1.3-20.el8_10; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support (rsync): ≥ 0:3.1.3-7.el8_2.3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (rsync): ≥ 0:3.1.3-12.el8_4.3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service (rsync): ≥ 0:3.1.3-12.el8_4.3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions (rsync): ≥ 0:3.1.3-12.el8_4.3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (rsync): ≥ 0:3.1.3-14.el8_6.6; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service (rsync): ≥ 0:3.1.3-14.el8_6.6; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (rsync): ≥ 0:3.1.3-14.el8_6.6; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support (rsync): ≥ 0:3.1.3-20.el8_8.1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (rsync): ≥ 0:3.2.3-20.el9_5.1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (rsync): ≥ 0:3.2.3-9.el9_0.3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support (rsync): ≥ 0:3.2.3-19.el9_2.1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support (rsync): ≥ 0:3.2.3-19.el9_4.1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.12 (openshift/ose-rhel-coreos-8): ≥ 412.86.202502100314-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.13 (openshift/ose-rhel-coreos-9): ≥ 413.92.202503112237-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.14 (openshift/ose-rhel-coreos-9): ≥ 414.92.202502111902-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift/ose-rhel-coreos-9): ≥ 415.92.202501281917-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-ansible-rhel9-operator): ≥ v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-helm-rhel9-operator): ≥ v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-operator-sdk-rhel9): ≥ v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.17 (openshift/ose-rhel-coreos-9): ≥ 417.94.202502051822-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/aws-kms-encryption-provider-rhel9): ≥ v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/azure-kms-encryption-provider-rhel9): ≥ v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/azure-service-rhel9-operator): ≥ v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/cloud-network-config-controller-rhel9): ≥ v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/container-networking-plugins-microshift-rhel9): ≥ v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/driver-toolkit-rhel9): ≥ v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/egress-router-cni-rhel9): ≥ v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/frr-rhel9): ≥ v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/insights-runtime-exporter-rhel9): ≥ v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/insights-runtime-extractor-rhel9): ≥ v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/kube-metrics-server-rhel9): ≥ v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/kubevirt-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/network-tools-rhel9): ≥ v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/oc-mirror-plugin-rhel9): ≥ v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/openshift-route-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-api-server-rhel9): ≥ v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-csr-approver-rhel9): ≥ v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-node-agent-rhel9): ≥ v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-orchestrator-rhel9): ≥ v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-utils-rhel9): ≥ v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-apiserver-network-proxy-rhel9): ≥ v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-aws-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.gc395190.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-aws-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-aws-ebs-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-aws-ebs-csi-driver-rhel9-operator): ≥ v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-aws-pod-identity-webhook-rhel9): ≥ v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-cloud-node-manager-rhel9): ≥ v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.g987615c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-disk-csi-driver-rhel9): ≥ v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-disk-csi-driver-rhel9-operator): ≥ v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-file-csi-driver-operator-rhel9): ≥ v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-file-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-azure-workload-identity-webhook-rhel9): ≥ v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-baremetal-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-baremetal-installer-rhel9): ≥ v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-baremetal-machine-controllers-rhel9): ≥ v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-baremetal-rhel9-operator): ≥ v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-baremetal-runtimecfg-rhel9): ≥ v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cli-artifacts-rhel9): ≥ v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cli-rhel9): ≥ v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cloud-credential-rhel9-operator): ≥ v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-api-rhel9): ≥ v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-authentication-rhel9-operator): ≥ v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-autoscaler-rhel9): ≥ v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-autoscaler-rhel9-operator): ≥ v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-baremetal-operator-rhel9): ≥ v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-bootstrap-rhel9): ≥ v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-capi-rhel9-operator): ≥ v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-cloud-controller-manager-rhel9-operator): ≥ v4.18.0-202501230001.p0.g3385690.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-config-api-rhel9): ≥ v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-config-rhel9-operator): ≥ v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-control-plane-machine-set-rhel9-operator): ≥ v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator): ≥ v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-dns-rhel9-operator): ≥ v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-etcd-rhel9-operator): ≥ v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-image-registry-rhel9-operator): ≥ v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-ingress-rhel9-operator): ≥ v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-kube-apiserver-rhel9-operator): ≥ v4.18.0-202502101302.p0.g763313c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-kube-cluster-api-rhel9-operator): ≥ v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-kube-controller-manager-rhel9-operator): ≥ v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-kube-scheduler-rhel9-operator): ≥ v4.18.0-202502041632.p0.g6182930.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator): ≥ v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-machine-approver-rhel9): ≥ v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-monitoring-rhel9-operator): ≥ v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-network-rhel9-operator): ≥ v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-node-tuning-rhel9-operator): ≥ v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-olm-rhel9-operator): ≥ v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-openshift-apiserver-rhel9-operator): ≥ v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-openshift-controller-manager-rhel9-operator): ≥ v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-policy-controller-rhel9): ≥ v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-samples-rhel9-operator): ≥ v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-storage-rhel9-operator): ≥ v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-update-keys-rhel9): ≥ v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-cluster-version-rhel9-operator): ≥ v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-configmap-reloader-rhel9): ≥ v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-console-rhel9): ≥ v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-console-rhel9-operator): ≥ v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-container-networking-plugins-rhel9): ≥ v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-coredns-rhel9): ≥ v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-driver-manila-rhel9): ≥ v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-driver-manila-rhel9-operator): ≥ v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-driver-nfs-rhel9): ≥ v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-external-attacher-rhel9): ≥ v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-external-provisioner-rhel9): ≥ v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-external-resizer-rhel9): ≥ v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-external-snapshotter-rhel9): ≥ v4.18.0-202501230001.p0.g838d248.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-livenessprobe-rhel9): ≥ v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-node-driver-registrar-rhel9): ≥ v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-snapshot-controller-rhel9): ≥ v4.18.0-202501230001.p0.g838d248.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-csi-snapshot-validation-webhook-rhel9): ≥ v4.18.0-202501230001.p0.g838d248.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-deployer-rhel9): ≥ v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-docker-builder-rhel9): ≥ v4.18.0-202501281202.p0.g336d783.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-docker-registry-rhel9): ≥ v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-etcd-rhel9): ≥ v4.18.0-202501230001.p0.g914783c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-gcp-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-gcp-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-gcp-pd-csi-driver-operator-rhel9): ≥ v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-gcp-pd-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-gcp-workload-identity-federation-webhook-rhel9): ≥ v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-haproxy-router-rhel9): ≥ v4.18.0-202502010001.p0.g061909a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-hyperkube-rhel9): ≥ v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-hypershift-rhel9): ≥ v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ibmcloud-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ibm-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ibmcloud-machine-controllers-rhel9): ≥ v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ibm-vpc-block-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator): ≥ v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-image-customization-controller-rhel9): ≥ v4.18.0-202501230001.p0.ge905646.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-insights-rhel9-operator): ≥ v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-installer-altinfra-rhel9): ≥ v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-installer-artifacts-rhel9): ≥ v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-installer-rhel9): ≥ v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ironic-agent-rhel9): ≥ v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ironic-machine-os-downloader-rhel9): ≥ v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ironic-rhel9): ≥ v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ironic-static-ip-manager-rhel9): ≥ v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-keepalived-ipfailover-rhel9): ≥ v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-kube-proxy-rhel9): ≥ v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-kube-rbac-proxy-rhel9): ≥ v4.18.0-202501230001.p0.g526498a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-kube-state-metrics-rhel9): ≥ v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-kube-storage-version-migrator-rhel9): ≥ v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-kubevirt-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-libvirt-machine-controllers-rhel9): ≥ v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-api-provider-aws-rhel9): ≥ v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-api-provider-azure-rhel9): ≥ v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-api-provider-gcp-rhel9): ≥ v4.18.0-202501230001.p0.ga371641.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-api-provider-openstack-rhel9): ≥ v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-api-rhel9-operator): ≥ v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-config-rhel9-operator): ≥ v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-os-images-rhel9): ≥ v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-monitoring-plugin-rhel9): ≥ v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-multus-admission-controller-rhel9): ≥ v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-multus-cni-microshift-rhel9): ≥ v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-multus-cni-rhel9): ≥ v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-multus-networkpolicy-rhel9): ≥ v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-multus-route-override-cni-rhel9): ≥ v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-multus-whereabouts-ipam-cni-rhel9): ≥ v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-must-gather-rhel9): ≥ v4.18.0-202502040032.p0.gc864494.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-networking-console-plugin-rhel9): ≥ v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-network-interface-bond-cni-rhel9): ≥ v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-network-metrics-daemon-rhel9): ≥ v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-nutanix-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-nutanix-machine-controllers-rhel9): ≥ v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-oauth-apiserver-rhel9): ≥ v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-oauth-proxy-rhel9): ≥ v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-oauth-server-rhel9): ≥ v4.18.0-202501230001.p0.gd352778.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-olm-catalogd-rhel9): ≥ v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-olm-operator-controller-rhel9): ≥ v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openshift-apiserver-rhel9): ≥ v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openshift-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openshift-state-metrics-rhel9): ≥ v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openstack-cinder-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openstack-cinder-csi-driver-rhel9-operator): ≥ v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openstack-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openstack-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-operator-framework-tools-rhel9): ≥ v4.18.0-202501230001.p0.g182471a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-operator-lifecycle-manager-rhel9): ≥ v4.18.0-202501230001.p0.g182471a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-operator-marketplace-rhel9): ≥ v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-operator-registry-rhel9): ≥ v4.18.0-202501230001.p0.g182471a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ovn-kubernetes-microshift-rhel9): ≥ v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-ovn-kubernetes-rhel9): ≥ v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-pod-rhel9): ≥ v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-powervs-block-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-powervs-block-csi-driver-rhel9-operator): ≥ v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-powervs-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-powervs-machine-controllers-rhel9): ≥ v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prometheus-alertmanager-rhel9): ≥ v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prometheus-config-reloader-rhel9): ≥ v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prometheus-node-exporter-rhel9): ≥ v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prometheus-operator-admission-webhook-rhel9): ≥ v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prometheus-rhel9): ≥ v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prometheus-rhel9-operator): ≥ v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-prom-label-proxy-rhel9): ≥ v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-service-ca-rhel9-operator): ≥ v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-telemeter-rhel9): ≥ v4.18.0-202501230001.p0.g700802f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-tests-rhel9): ≥ v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-thanos-rhel9): ≥ v4.18.0-202501230001.p0.g314589c.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-tools-rhel9): ≥ v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vmware-vsphere-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vmware-vsphere-csi-driver-rhel9-operator): ≥ v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vsphere-cloud-controller-manager-rhel9): ≥ v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vsphere-cluster-api-controllers-rhel9): ≥ v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vsphere-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vsphere-csi-driver-rhel9-operator): ≥ v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vsphere-csi-driver-syncer-rhel9): ≥ v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-vsphere-problem-detector-rhel9): ≥ v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ovirt-csi-driver-rhel9): ≥ v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ovirt-csi-driver-rhel9-operator): ≥ v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift/ose-rhel-coreos-9): ≥ 418.94.202502100215-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/cluster-logging-operator-bundle): ≥ v5.8.17-22; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/cluster-logging-rhel9-operator): ≥ v5.8.17-10; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/elasticsearch6-rhel9): ≥ v6.8.1-454; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/elasticsearch-operator-bundle): ≥ v5.8.17-17; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/elasticsearch-proxy-rhel9): ≥ v1.0.0-537; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/elasticsearch-rhel9-operator): ≥ v5.8.17-4; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/eventrouter-rhel9): ≥ v0.4.0-339; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/fluentd-rhel9): ≥ v5.8.17-4; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/log-file-metric-exporter-rhel9): ≥ v1.1.0-320; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/logging-curator5-rhel9): ≥ v5.8.1-552; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/logging-loki-rhel9): ≥ v3.3.2-9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/logging-view-plugin-rhel9): ≥ v5.8.17-5; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/loki-operator-bundle): ≥ v5.8.17-12; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/loki-rhel9-operator): ≥ v5.8.17-5; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/lokistack-gateway-rhel9): ≥ v0.1.0-725; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/opa-openshift-rhel9): ≥ v0.1.0-342; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.8-RHEL-9 (openshift-logging/vector-rhel9): ≥ v0.28.1-88; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/cluster-logging-operator-bundle): ≥ v5.9.11-25; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/cluster-logging-rhel9-operator): ≥ v5.9.11-11; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/eventrouter-rhel9): ≥ v0.4.0-340; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/fluentd-rhel9): ≥ v5.9.11-5; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/log-file-metric-exporter-rhel9): ≥ v1.1.0-321; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/logging-loki-rhel9): ≥ v3.3.2-8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/logging-view-plugin-rhel9): ≥ v5.9.11-6; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/loki-operator-bundle): ≥ v5.9.11-9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/loki-rhel9-operator): ≥ v5.9.11-4; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/lokistack-gateway-rhel9): ≥ v0.1.0-724; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/opa-openshift-rhel9): ≥ v0.1.0-341; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHOL-5.9-RHEL-9 (openshift-logging/vector-rhel9): ≥ v0.34.1-30; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / OpenShift Compliance Operator 1 (compliance/openshift-compliance-must-gather-rhel8): ≥ 1.8.0; < * (unaffected, rpm). Source: CNA: redhat

## NVD configuration conditions

Affected CPE matches depend on the following AND/OR and negation conditions:

```json
[
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "3.3.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redhat:openshift:5.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.13:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.14:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.15:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.16:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.17:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.8_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:almalinux:almalinux:8.0:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:almalinux:almalinux:10.0:-:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:archlinux:arch_linux:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:nixos:nixos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "24.11",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tritondatacenter:smartos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "20250123",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  }
]
```

## Severity and prioritization

- CVSS 3.1: 7.5 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; source: CNA: redhat

- CVSS 3.1: 7.5 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; source: NVD: secalert@redhat.com

- CISA KEV: No listing in collected sources

- EPSS: 8.64% as of 2026-11-09; percentile 95.14%

- SSVC: exploitation poc; automatable yes; technical impact partial; source ADP: CISA-ADP

- Weaknesses: CWE-908

## Exploit evidence

- exploit: https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj (ADP: CISA-ADP)
- exploit: https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj (134c704f-9b21-4f2e-91b3-4a467353bcc0)

## References

- https://access.redhat.com/errata/RHBA-2025:6470 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:6122 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0324 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0325 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0637 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0688 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0714 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0774 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0787 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0790 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0849 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0884 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:0885 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1120 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1123 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1128 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1225 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1227 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1242 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:1451 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:21885 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2025:2701 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2024-12085 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- https://bugzilla.redhat.com/show_bug.cgi?id=2330539 (CNA: redhat; issue-tracking, x_refsource_REDHAT)

- https://kb.cert.org/vuls/id/952657 (CNA: redhat)

- https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj (ADP: CISA-ADP; exploit)

- https://security.netapp.com/advisory/ntap-20250131-0002/ (ADP: CVE)

- https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html (ADP: CVE)

- https://www.kb.cert.org/vuls/id/952657 (ADP: CVE)

- https://access.redhat.com/errata/RHBA-2025:6470 (secalert@redhat.com)

- https://access.redhat.com/errata/RHSA-2024:6122 (secalert@redhat.com)

- https://access.redhat.com/errata/RHSA-2025:0324 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0325 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0637 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0688 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0714 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0774 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0787 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0790 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0849 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0884 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:0885 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1120 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1123 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1128 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1225 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1227 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1242 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:1451 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/errata/RHSA-2025:21885 (secalert@redhat.com)

- https://access.redhat.com/errata/RHSA-2025:2701 (secalert@redhat.com; Third Party Advisory)

- https://access.redhat.com/security/cve/CVE-2024-12085 (secalert@redhat.com; Third Party Advisory)

- https://bugzilla.redhat.com/show_bug.cgi?id=2330539 (secalert@redhat.com; Issue Tracking, Third Party Advisory)

- https://kb.cert.org/vuls/id/952657 (secalert@redhat.com; Third Party Advisory)

- https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html (af854a3a-2127-422b-91ae-364da2661108)

- https://security.netapp.com/advisory/ntap-20250131-0002/ (af854a3a-2127-422b-91ae-364da2661108)

- https://www.kb.cert.org/vuls/id/952657 (af854a3a-2127-422b-91ae-364da2661108)

- https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj (134c704f-9b21-4f2e-91b3-4a467353bcc0; Exploit, Third Party Advisory)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2024-12085; retrieved 2026-11-10; source updated 2026-11-10

- NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-12085; retrieved 2026-11-10; source updated 2026-11-10

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2024-12085; retrieved 2026-11-10; source updated Not reported

Revision: 2b2db17669db1a79d19e6180dae7e6951e47ec17eee0a2a5599a30040072c818

Canonical: https://y2.dev/cve/CVE-2024-12085

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.