{"id":"CVE-2021-3636","aliases":["EUVD-2021-26937","GHSA-6fcp-x27g-fqqw","RHSA-2021:2437"],"status":"published","title":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...","description":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00284,"percentile":0.21089,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-295"],"published":"2021-07-30T19:27:06Z","modified":"2026-10-09T10:02:33Z","affected":[{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"afterburn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages-issuegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages-profile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-bootinfra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-bootinfra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"haproxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-ipa-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-ipa-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.289.1.1624020353-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1624022417-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"kata-containers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.2-0.20210611153100.bfa97cb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-debtcollector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-0.20210324220630.649189d.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-0.20210608101214.ca2e4ba.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-ironic-prometheus-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-0.20210325143713.70e39c8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-5.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-0.20210325001456.6a66271.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.12.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-openstacksdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-concurrency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-concurrency-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.5.0-0.20210325050501.cfa2564.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-0.20210325043103.0d02866.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-db-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-i18n-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-log-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-policy-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-upgradecheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-0.20210325003851.9f95a6e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-utils-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-0.20210325001012.7d7154f.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-sushy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-sushy-oem-idrac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-tooz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-0.20210324235001.54448e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-debtcollector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-0.20210324220630.649189d.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-hardware-detect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-inspector-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-0.20210608101214.ca2e4ba.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-prometheus-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-0.20210325143713.70e39c8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.2-0.20210611153100.bfa97cb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-5.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-0.20210325001456.6a66271.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kubernetes-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.12.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openstacksdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openstacksdk-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-concurrency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-concurrency-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.5.0-0.20210325050501.cfa2564.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-0.20210325043103.0d02866.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-db-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-log-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-serialization-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-service-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-upgradecheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-0.20210325003851.9f95a6e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-utils-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-pyrsistent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-0.20210325001012.7d7154f.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-oem-idrac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-oem-idrac-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-tooz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-0.20210324235001.54448e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"redhat-release-coreos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:48.84-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rteval-loads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-12.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rteval-loads-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-12.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rust-afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rust-afterburn-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"stress-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.06-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"stress-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.06-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-3.rhaos4.8.el8"}]}],"bundled":26}],"products":[{"vendor":"redhat","product":"openshift"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978621","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3636","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6fcp-x27g-fqqw"},{"url":"https://access.redhat.com/errata/RHSA-2021:2437","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959545","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2437.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20291","tags":["advisory"]},{"url":"https://unit42.paloaltonetworks.com/cve-2021-20291/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21419","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21604","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21608","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21609","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21610","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21623","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21642","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21643","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21648","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2349","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25735","tags":["advisory"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25737","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/102106","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954736","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-004","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30465","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2021-3636","description":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.","status":"published","published":"2021-07-30T19:27:06Z","modified":"2024-08-03T17:01:07.589Z","cwes":["CWE-295"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26937","description":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.","status":"published","published":"2021-07-30T19:27:06Z","modified":"2024-08-03T17:01:07Z","updated_at":"2026-11-03T03:25:12.535968Z"}],"ghsa":[{"id":"GHSA-6fcp-x27g-fqqw","title":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...","description":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.","status":"published","published":"2022-05-24T19:09:18Z","modified":"2023-01-30T05:01:45Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:46:28.825002Z"}],"nvd":[{"id":"CVE-2021-3636","description":"It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.","status":"published","published":"2021-07-30T20:15:07.687Z","modified":"2026-06-17T04:05:28.997Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.1,"vector":"AV:A/AC:L/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295","CWE-287"],"updated_at":"2026-11-02T14:06:56.185362Z"}],"osv":[{"id":"RHSA-2021:2437","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update","status":"published","published":"2024-09-18T04:18:53Z","modified":"2026-10-09T10:02:33Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"}]}}