{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated el8/flatpak-sdk container image is now available for Red Hat Enterprise Linux 8.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The el8/flatpak-sdk container image has been updated for Red Hat Enterprise Linux 8 to address the following security advisory: RHSA-2024:7000 (see References)\n\nUsers of el8/flatpak-sdk container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.\n\nYou can find images updated by this advisory in Red Hat Container Catalog (see References).",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2024:7236",
        "url": "https://access.redhat.com/errata/RHBA-2024:7236"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/errata/RHSA-2024:7000",
        "url": "https://access.redhat.com/errata/RHSA-2024:7000"
      },
      {
        "category": "external",
        "summary": "https://catalog.redhat.com/software/containers/registry/registry.access.redhat.com/repository/el8/flatpak-sdk",
        "url": "https://catalog.redhat.com/software/containers/registry/registry.access.redhat.com/repository/el8/flatpak-sdk"
      },
      {
        "category": "external",
        "summary": "2258012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258012"
      },
      {
        "category": "external",
        "summary": "2258013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258013"
      },
      {
        "category": "external",
        "summary": "2260038",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2260038"
      },
      {
        "category": "external",
        "summary": "2265799",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265799"
      },
      {
        "category": "external",
        "summary": "2265838",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265838"
      },
      {
        "category": "external",
        "summary": "2266358",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266358"
      },
      {
        "category": "external",
        "summary": "2266750",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266750"
      },
      {
        "category": "external",
        "summary": "2267036",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267036"
      },
      {
        "category": "external",
        "summary": "2267041",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267041"
      },
      {
        "category": "external",
        "summary": "2267795",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267795"
      },
      {
        "category": "external",
        "summary": "2267916",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267916"
      },
      {
        "category": "external",
        "summary": "2267925",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267925"
      },
      {
        "category": "external",
        "summary": "2268295",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268295"
      },
      {
        "category": "external",
        "summary": "2270103",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270103"
      },
      {
        "category": "external",
        "summary": "2271648",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271648"
      },
      {
        "category": "external",
        "summary": "2271796",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271796"
      },
      {
        "category": "external",
        "summary": "2272793",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272793"
      },
      {
        "category": "external",
        "summary": "2273141",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273141"
      },
      {
        "category": "external",
        "summary": "2273148",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273148"
      },
      {
        "category": "external",
        "summary": "2273180",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273180"
      },
      {
        "category": "external",
        "summary": "2275558",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275558"
      },
      {
        "category": "external",
        "summary": "2275661",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275661"
      },
      {
        "category": "external",
        "summary": "2275690",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275690"
      },
      {
        "category": "external",
        "summary": "2275742",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275742"
      },
      {
        "category": "external",
        "summary": "2277171",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2277171"
      },
      {
        "category": "external",
        "summary": "2278220",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2278220"
      },
      {
        "category": "external",
        "summary": "2278270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2278270"
      },
      {
        "category": "external",
        "summary": "2278447",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2278447"
      },
      {
        "category": "external",
        "summary": "2281217",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281217"
      },
      {
        "category": "external",
        "summary": "2281317",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281317"
      },
      {
        "category": "external",
        "summary": "2281704",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281704"
      },
      {
        "category": "external",
        "summary": "2281720",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281720"
      },
      {
        "category": "external",
        "summary": "2281807",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281807"
      },
      {
        "category": "external",
        "summary": "2281847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2281847"
      },
      {
        "category": "external",
        "summary": "2282324",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282324"
      },
      {
        "category": "external",
        "summary": "2282345",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282345"
      },
      {
        "category": "external",
        "summary": "2282354",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282354"
      },
      {
        "category": "external",
        "summary": "2282355",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282355"
      },
      {
        "category": "external",
        "summary": "2282356",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282356"
      },
      {
        "category": "external",
        "summary": "2282357",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282357"
      },
      {
        "category": "external",
        "summary": "2282366",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282366"
      },
      {
        "category": "external",
        "summary": "2282401",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282401"
      },
      {
        "category": "external",
        "summary": "2282422",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282422"
      },
      {
        "category": "external",
        "summary": "2282440",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282440"
      },
      {
        "category": "external",
        "summary": "2282508",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282508"
      },
      {
        "category": "external",
        "summary": "2282511",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282511"
      },
      {
        "category": "external",
        "summary": "2282648",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282648"
      },
      {
        "category": "external",
        "summary": "2282669",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282669"
      },
      {
        "category": "external",
        "summary": "2282676",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282676"
      },
      {
        "category": "external",
        "summary": "2282757",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282757"
      },
      {
        "category": "external",
        "summary": "2282764",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282764"
      },
      {
        "category": "external",
        "summary": "2282851",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282851"
      },
      {
        "category": "external",
        "summary": "2282890",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282890"
      },
      {
        "category": "external",
        "summary": "2282903",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282903"
      },
      {
        "category": "external",
        "summary": "2282918",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282918"
      },
      {
        "category": "external",
        "summary": "2283389",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283389"
      },
      {
        "category": "external",
        "summary": "2283424",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283424"
      },
      {
        "category": "external",
        "summary": "2284271",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284271"
      },
      {
        "category": "external",
        "summary": "2284511",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284511"
      },
      {
        "category": "external",
        "summary": "2284515",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284515"
      },
      {
        "category": "external",
        "summary": "2284545",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284545"
      },
      {
        "category": "external",
        "summary": "2284596",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284596"
      },
      {
        "category": "external",
        "summary": "2284628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284628"
      },
      {
        "category": "external",
        "summary": "2284630",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284630"
      },
      {
        "category": "external",
        "summary": "2284634",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284634"
      },
      {
        "category": "external",
        "summary": "2293247",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293247"
      },
      {
        "category": "external",
        "summary": "2293270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293270"
      },
      {
        "category": "external",
        "summary": "2293273",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293273"
      },
      {
        "category": "external",
        "summary": "2293304",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293304"
      },
      {
        "category": "external",
        "summary": "2293377",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293377"
      },
      {
        "category": "external",
        "summary": "2293408",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293408"
      },
      {
        "category": "external",
        "summary": "2293414",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293414"
      },
      {
        "category": "external",
        "summary": "2293423",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293423"
      },
      {
        "category": "external",
        "summary": "2293440",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293440"
      },
      {
        "category": "external",
        "summary": "2293441",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293441"
      },
      {
        "category": "external",
        "summary": "2293658",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293658"
      },
      {
        "category": "external",
        "summary": "2294313",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294313"
      },
      {
        "category": "external",
        "summary": "2297471",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297471"
      },
      {
        "category": "external",
        "summary": "2297473",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297473"
      },
      {
        "category": "external",
        "summary": "2297478",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297478"
      },
      {
        "category": "external",
        "summary": "2297488",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297488"
      },
      {
        "category": "external",
        "summary": "2297495",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297495"
      },
      {
        "category": "external",
        "summary": "2297496",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297496"
      },
      {
        "category": "external",
        "summary": "2297513",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297513"
      },
      {
        "category": "external",
        "summary": "2297515",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297515"
      },
      {
        "category": "external",
        "summary": "2297525",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297525"
      },
      {
        "category": "external",
        "summary": "2297538",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297538"
      },
      {
        "category": "external",
        "summary": "2297542",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297542"
      },
      {
        "category": "external",
        "summary": "2297543",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297543"
      },
      {
        "category": "external",
        "summary": "2297544",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297544"
      },
      {
        "category": "external",
        "summary": "2297556",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297556"
      },
      {
        "category": "external",
        "summary": "2297561",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297561"
      },
      {
        "category": "external",
        "summary": "2297562",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297562"
      },
      {
        "category": "external",
        "summary": "2297572",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297572"
      },
      {
        "category": "external",
        "summary": "2297573",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297573"
      },
      {
        "category": "external",
        "summary": "2297579",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297579"
      },
      {
        "category": "external",
        "summary": "2297581",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297581"
      },
      {
        "category": "external",
        "summary": "2297582",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297582"
      },
      {
        "category": "external",
        "summary": "2297589",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297589"
      },
      {
        "category": "external",
        "summary": "2297706",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297706"
      },
      {
        "category": "external",
        "summary": "2297909",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2297909"
      },
      {
        "category": "external",
        "summary": "2298079",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298079"
      },
      {
        "category": "external",
        "summary": "2298140",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298140"
      },
      {
        "category": "external",
        "summary": "2298177",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298177"
      },
      {
        "category": "external",
        "summary": "2298640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298640"
      },
      {
        "category": "external",
        "summary": "2299240",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299240"
      },
      {
        "category": "external",
        "summary": "2299336",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299336"
      },
      {
        "category": "external",
        "summary": "2299452",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2299452"
      },
      {
        "category": "external",
        "summary": "2300296",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300296"
      },
      {
        "category": "external",
        "summary": "2300297",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300297"
      },
      {
        "category": "external",
        "summary": "2300381",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300381"
      },
      {
        "category": "external",
        "summary": "2300402",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300402"
      },
      {
        "category": "external",
        "summary": "2300407",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300407"
      },
      {
        "category": "external",
        "summary": "2300408",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300408"
      },
      {
        "category": "external",
        "summary": "2300409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300409"
      },
      {
        "category": "external",
        "summary": "2300410",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300410"
      },
      {
        "category": "external",
        "summary": "2300414",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300414"
      },
      {
        "category": "external",
        "summary": "2300429",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300429"
      },
      {
        "category": "external",
        "summary": "2300430",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300430"
      },
      {
        "category": "external",
        "summary": "2300434",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300434"
      },
      {
        "category": "external",
        "summary": "2300439",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300439"
      },
      {
        "category": "external",
        "summary": "2300440",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300440"
      },
      {
        "category": "external",
        "summary": "2300448",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300448"
      },
      {
        "category": "external",
        "summary": "2300453",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300453"
      },
      {
        "category": "external",
        "summary": "2300492",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300492"
      },
      {
        "category": "external",
        "summary": "2300533",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300533"
      },
      {
        "category": "external",
        "summary": "2300552",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300552"
      },
      {
        "category": "external",
        "summary": "2300709",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300709"
      },
      {
        "category": "external",
        "summary": "2300713",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300713"
      },
      {
        "category": "external",
        "summary": "2301477",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301477"
      },
      {
        "category": "external",
        "summary": "2301489",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301489"
      },
      {
        "category": "external",
        "summary": "2301496",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301496"
      },
      {
        "category": "external",
        "summary": "2301519",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301519"
      },
      {
        "category": "external",
        "summary": "2301522",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301522"
      },
      {
        "category": "external",
        "summary": "2301543",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301543"
      },
      {
        "category": "external",
        "summary": "2301544",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301544"
      },
      {
        "category": "external",
        "summary": "2303077",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2303077"
      },
      {
        "category": "external",
        "summary": "RHEL-31515",
        "url": "https://issues.redhat.com/browse/RHEL-31515"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_7236.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: updated el8/flatpak-sdk container image",
    "tracking": {
      "current_release_date": "2025-07-23T19:48:06+00:00",
      "generator": {
        "date": "2025-07-23T19:48:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.4"
        }
      },
      "id": "RHBA-2024:7236",
      "initial_release_date": "2024-09-26T14:31:36+00:00",
      "revision_history": [
        {
          "date": "2024-09-26T14:31:36+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-09-26T14:31:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-07-23T19:48:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64",
                "product": {
                  "name": "rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64",
                  "product_id": "rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5?arch=amd64\u0026repository_url=registry.redhat.io/rhel8/flatpak-sdk\u0026tag=el8-8100020240123120116.1727145670"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.GA:rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64"
        },
        "product_reference": "rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64",
        "relates_to_product_reference": "AppStream-8.10.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-50072",
      "cwe": {
        "id": "CWE-763",
        "name": "Release of Invalid Pointer or Reference"
      },
      "discovery_date": "2025-06-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/pnfs: Fix a use-after-free bug in open\n\nIf someone cancels the open RPC call, then we must not try to free\neither the open slot or the layoutget operation arguments, since they\nare likely still in use by the hung RPC call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: NFSv4/pnfs: Fix a use-after-free bug in open",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.GA:rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-50072"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-50072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-50072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-50072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50072"
        },
        {
          "category": "external",
          "summary": "https://lore.kernel.org/linux-cve-announce/2025061853-CVE-2022-50072-de2b@gregkh/T",
          "url": "https://lore.kernel.org/linux-cve-announce/2025061853-CVE-2022-50072-de2b@gregkh/T"
        }
      ],
      "release_date": "2025-06-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-26T14:31:36+00:00",
          "details": "The Red Hat Enterprise Linux 8 container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.",
          "product_ids": [
            "AppStream-8.10.0.GA:rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2024:7236"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.GA:rhel8/flatpak-sdk@sha256:901255695a80a8311a7b0d741e94a0b59ee72a0fd89713a4fc291d36450fe9b5_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: NFSv4/pnfs: Fix a use-after-free bug in open"
    }
  ]
}