Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_enterprise_linux_8:389-ds-base::389-ds:1.4 389-ds-base (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | 389-ds-base::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:389-ds-base-devel::389-ds:1.4 389-ds-base-devel (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | 389-ds-base-devel::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:389-ds-base-legacy-tools::389-ds:1.4 389-ds-base-legacy-tools (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | 389-ds-base-legacy-tools::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:389-ds-base-libs::389-ds:1.4 389-ds-base-libs (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | 389-ds-base-libs::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:389-ds-base-snmp::389-ds:1.4 389-ds-base-snmp (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | 389-ds-base-snmp::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:389-ds-base.src::389-ds:1.4 389-ds-base.src (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | 389-ds-base.src::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_3scale_api_management_platform_2:3scale-apicast-operator-bundle-container 3scale-apicast-operator-bundle-container as a component of Red Hat 3scale API Management Platform 2 | affected | 3scale-apicast-operator-bundle-container | workaround fix in another branch | csaf_redhat | |
| red_hat_3scale_api_management_platform_2:3scale-apicast-operator-container 3scale-apicast-operator-container as a component of Red Hat 3scale API Management Platform 2 | affected | 3scale-apicast-operator-container | workaround fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:application-ui-container application-ui-container as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | no version stated vendor label: application-ui-container | workaround fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-base ceph-base as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-base | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-common ceph-common as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-common | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-fuse ceph-fuse as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-fuse | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-grafana-dashboards ceph-grafana-dashboards as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-grafana-dashboards | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mds ceph-mds as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mds | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mgr ceph-mgr as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mgr | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mgr-dashboard ceph-mgr-dashboard as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mgr-dashboard | no fix planned fix in another branch → ceph-mgr-dashboard-2:16.2.10-94.el8cp.noarch (RHSA-2023:0076) | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mgr-diskprediction-local ceph-mgr-diskprediction-local as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mgr-diskprediction-local | no fix planned fix in another branch → ceph-mgr-diskprediction-local-2:16.2.10-94.el8cp.noarch (RHSA-2023:0076) | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mgr-k8sevents ceph-mgr-k8sevents as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mgr-k8sevents | no fix planned fix in another branch → ceph-mgr-k8sevents-2:16.2.10-94.el8cp.noarch (RHSA-2023:0076) | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mgr-rook ceph-mgr-rook as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mgr-rook | no fix planned fix in another branch → ceph-mgr-rook-2:16.2.10-94.el8cp.noarch (RHSA-2023:0076) | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-mon ceph-mon as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-mon | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-osd ceph-osd as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-osd | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-radosgw ceph-radosgw as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-radosgw | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-selinux ceph-selinux as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-selinux | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph-test ceph-test as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph-test | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:ceph.src ceph.src as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: ceph.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_openshift_container_storage_4:ceph.src ceph.src as a component of Red Hat Openshift Container Storage 4 | affected | no version stated vendor label: ceph.src | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_data_foundation_4:ceph.src ceph.src as a component of Red Hat Openshift Data Foundation 4 | affected | no version stated vendor label: ceph.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_8:cockpit-389-ds::389-ds:1.4 cockpit-389-ds (389-ds:1.4) as a component of Red Hat Enterprise Linux 8 | affected | cockpit-389-ds::389-ds:1.4 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_3:grafana grafana as a component of Red Hat Ceph Storage 3 | affected | no version stated vendor label: grafana | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:grafana grafana as a component of Red Hat Storage 3 | affected | no version stated vendor label: grafana | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_3:grafana.src grafana.src as a component of Red Hat Ceph Storage 3 | affected | no version stated vendor label: grafana.src | out of support fix in another branch | csaf_redhat | |
| red_hat_storage_3:grafana.src grafana.src as a component of Red Hat Storage 3 | affected | no version stated vendor label: grafana.src | no fix planned fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:grc-ui-api-container grc-ui-api-container as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | no version stated vendor label: grc-ui-api-container | workaround fix in another branch | csaf_redhat | |
| red_hat_advanced_cluster_management_for_kubernetes_2:grc-ui-container grc-ui-container as a component of Red Hat Advanced Cluster Management for Kubernetes 2 | affected | no version stated vendor label: grc-ui-container | workaround fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.0:kiali kiali as a component of OpenShift Service Mesh 2.0 | affected | no version stated vendor label: kiali | workaround fix in another branch | csaf_redhat | |
| openshift_service_mesh_2.0:kiali.src kiali.src as a component of OpenShift Service Mesh 2.0 | affected | no version stated vendor label: kiali.src | workaround fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:libcephfs-devel libcephfs-devel as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: libcephfs-devel | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:libcephfs2 libcephfs2 as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: libcephfs2 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_satellite_6:libqpid-dispatch libqpid-dispatch as a component of Red Hat Satellite 6 | affected | no version stated vendor label: libqpid-dispatch | workaround fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:librados-devel librados-devel as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: librados-devel | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:librados2 librados2 as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: librados2 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:libradospp-devel libradospp-devel as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: libradospp-devel | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:libradosstriper1 libradosstriper1 as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: libradosstriper1 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:librbd-devel librbd-devel as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: librbd-devel | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:librbd1 librbd1 as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: librbd1 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:librgw-devel librgw-devel as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: librgw-devel | no fix planned fix in another branch | csaf_redhat | |
| red_hat_ceph_storage_4:librgw2 librgw2 as a component of Red Hat Ceph Storage 4 | affected | no version stated vendor label: librgw2 | no fix planned fix in another branch | csaf_redhat | |
| red_hat_build_of_apicurio_registry_2:Moment.js Moment.js as a component of Red Hat build of Apicurio Registry 2 | affected | no version stated vendor label: Moment.js | workaround fix in another branch | csaf_redhat | |
| red_hat_data_grid_8:Moment.js Moment.js as a component of Red Hat Data Grid 8 | affected | no version stated vendor label: Moment.js | no fix planned fix in another branch | csaf_redhat | |
| red_hat_integration_camel_k_1:Moment.js Moment.js as a component of Red Hat Integration Camel K 1 | affected | no version stated vendor label: Moment.js | workaround fix in another branch | csaf_redhat | |
| red_hat_integration_data_virtualisation_operator:Moment.js Moment.js as a component of Red Hat Integration Data Virtualisation Operator | affected | no version stated vendor label: Moment.js | out of support fix in another branch | csaf_redhat | |
| red_hat_integration_service_registry:Moment.js Moment.js as a component of Red Hat Integration Service Registry | affected | no version stated vendor label: Moment.js | out of support fix in another branch | csaf_redhat | |
| red_hat_jboss_data_grid_7:Moment.js Moment.js as a component of Red Hat JBoss Data Grid 7 | affected | no version stated vendor label: Moment.js | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_data_foundation_4:noobaa-core-container noobaa-core-container as a component of Red Hat Openshift Data Foundation 4 | affected | no version stated vendor label: noobaa-core-container | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_storage_4:ocs4/mcg-core-rhel8 ocs4/mcg-core-rhel8 as a component of Red Hat Openshift Container Storage 4 | affected | ocs4/mcg-core-rhel8 | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel8 openshift-gitops-1/argocd-rhel8 as a component of Red Hat OpenShift GitOps | affected | openshift-gitops-1/argocd-rhel8 | workaround fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:openshift3/grafana openshift3/grafana as a component of Red Hat OpenShift Container Platform 3.11 | affected | openshift3/grafana | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:openshift3/ose-console openshift3/ose-console as a component of Red Hat OpenShift Container Platform 3.11 | affected | openshift3/ose-console | out of support fix in another branch | csaf_redhat | |
| red_hat_openshift_container_platform_3.11:openshift3/prometheus openshift3/prometheus as a component of Red Hat OpenShift Container Platform 3.11 | affected | openshift3/prometheus | out of support fix in another branch | csaf_redhat | |
| red_hat_virtualization_4:ovirt-engine-api-explorer.src ovirt-engine-api-explorer.src as a component of Red Hat Virtualization 4 | affected | no version stated vendor label: ovirt-engine-api-explorer.src | out of support fix in another branch | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.