{"metadata": {"vulnerability": "CVE-2026-111943", "count": 1922, "kinds": {"milestone": 159, "sighting": 20, "kev": 0, "other": 1743}}, "data": [{"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-23T12:57:38.123Z", "date_only": false, "value": "2025-01-23T12:57:38.123000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-01-23T12:57:38.123Z", "date_only": false, "value": "2025-01-23T12:57:38.123000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-01-23T12:57:38.123Z", "date_only": false, "value": "2025-01-23T12:57:38.123000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-01-23T12:57:38.123Z", "date_only": false, "value": "2025-01-23T12:57:38.123000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-01-23T12:57:38.123Z", "date_only": false, "value": "2025-01-23T12:57:38.123000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-01-23T12:57:38.123Z", "date_only": false, "value": "2025-01-23T12:57:38.123000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-02-06T16:54:10.252Z", "date_only": false, "value": "2025-02-06T16:54:10.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-02-06T16:54:10.252Z", "date_only": false, "value": "2025-02-06T16:54:10.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-02-06T16:54:10.252Z", "date_only": false, "value": "2025-02-06T16:54:10.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-02-06T16:54:10.252Z", "date_only": false, "value": "2025-02-06T16:54:10.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-02-06T16:54:10.252Z", "date_only": false, "value": "2025-02-06T16:54:10.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-02-06T16:54:10.252Z", "date_only": false, "value": "2025-02-06T16:54:10.252000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-02-06T17:00:56.155Z", "date_only": false, "value": "2025-02-06T17:00:56.155646+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-02-06T17:00:56.155Z", "date_only": false, "value": "2025-02-06T17:00:56.155646+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-02-06T17:00:56.155Z", "date_only": false, "value": "2025-02-06T17:00:56.155646+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-02-06T17:00:56.155Z", "date_only": false, "value": "2025-02-06T17:00:56.155646+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-02-06T17:00:56.155Z", "date_only": false, "value": "2025-02-06T17:00:56.155646+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-02-06T17:00:56.155Z", "date_only": false, "value": "2025-02-06T17:00:56.155646+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-06-11T16:42:52.856Z", "date_only": false, "value": "2025-06-11T16:42:52.856000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2025-06-11T16:42:52.856Z", "date_only": false, "value": "2025-06-11T16:42:52.856000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2025-06-11T16:42:53.054Z", "date_only": false, "value": "2025-06-11T16:42:53.054000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-06-11T16:42:53.054Z", "date_only": false, "value": "2025-06-11T16:42:53.054000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-06-11T17:00:48.521Z", "date_only": false, "value": "2025-06-11T17:00:48.521459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-06-11T17:00:48.521Z", "date_only": false, "value": "2025-06-11T17:00:48.521459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-06-18T06:34:57.662Z", "date_only": false, "value": "2025-06-18T06:34:57.662025+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-06-18T06:34:57.662Z", "date_only": false, "value": "2025-06-18T06:34:57.662025+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-10-07T03:10:59.473Z", "date_only": false, "value": "2025-10-07T03:10:59.473000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-28T19:30:31.215Z", "date_only": false, "value": "2026-01-28T19:30:31.215000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-28T20:01:42.791Z", "date_only": false, "value": "2026-01-28T20:01:42.791305+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-02-05T17:48:44.141Z", "date_only": false, "value": "2026-02-05T17:48:44.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-02-05T17:48:44.141Z", "date_only": false, "value": "2026-02-05T17:48:44.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-02-05T17:48:44.141Z", "date_only": false, "value": "2026-02-05T17:48:44.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-02-05T17:48:44.141Z", "date_only": false, "value": "2026-02-05T17:48:44.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-02-05T17:48:44.141Z", "date_only": false, "value": "2026-02-05T17:48:44.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-02-05T17:48:44.141Z", "date_only": false, "value": "2026-02-05T17:48:44.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-02-05T18:01:30.086Z", "date_only": false, "value": "2026-02-05T18:01:30.086058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-02-05T18:01:30.086Z", "date_only": false, "value": "2026-02-05T18:01:30.086058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-02-05T18:01:30.086Z", "date_only": false, "value": "2026-02-05T18:01:30.086058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-02-05T18:01:30.086Z", "date_only": false, "value": "2026-02-05T18:01:30.086058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-02-05T18:01:30.086Z", "date_only": false, "value": "2026-02-05T18:01:30.086058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-02-05T18:01:30.086Z", "date_only": false, "value": "2026-02-05T18:01:30.086058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-03-06T21:28:13.748Z", "date_only": false, "value": "2026-03-06T21:28:13.748000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-03-06T21:28:14.211Z", "date_only": false, "value": "2026-03-06T21:28:14.211000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-03-06T22:01:38.859Z", "date_only": false, "value": "2026-03-06T22:01:38.859733+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-03-06T22:02:11.567Z", "date_only": false, "value": "2026-03-06T22:02:11.567841+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-08T01:06:55.953Z", "date_only": false, "value": "2026-04-08T01:06:55.953000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-08T01:06:56.546Z", "date_only": false, "value": "2026-04-08T01:06:56.546000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-04-08T01:06:56.546Z", "date_only": false, "value": "2026-04-08T01:06:56.546000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-04-08T01:06:56.546Z", "date_only": false, "value": "2026-04-08T01:06:56.546000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-04-08T01:06:56.546Z", "date_only": false, "value": "2026-04-08T01:06:56.546000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-04-08T01:06:56.546Z", "date_only": false, "value": "2026-04-08T01:06:56.546000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-04-08T01:06:56.546Z", "date_only": false, "value": "2026-04-08T01:06:56.546000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-04-08T01:06:56.908Z", "date_only": false, "value": "2026-04-08T01:06:56.908000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-08T01:06:56.908Z", "date_only": false, "value": "2026-04-08T01:06:56.908000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-08T01:06:57.168Z", "date_only": false, "value": "2026-04-08T01:06:57.168000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-08T01:06:57.168Z", "date_only": false, "value": "2026-04-08T01:06:57.168000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-08T01:06:57.670Z", "date_only": false, "value": "2026-04-08T01:06:57.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-04-08T01:06:58.354Z", "date_only": false, "value": "2026-04-08T01:06:58.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-08T01:06:58.595Z", "date_only": false, "value": "2026-04-08T01:06:58.595000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-04-08T02:01:00.930Z", "date_only": false, "value": "2026-04-08T02:01:00.930989+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-04-08T02:01:09.100Z", "date_only": false, "value": "2026-04-08T02:01:09.100830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-04-08T02:01:09.100Z", "date_only": false, "value": "2026-04-08T02:01:09.100830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-04-08T02:01:09.100Z", "date_only": false, "value": "2026-04-08T02:01:09.100830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-04-08T02:01:09.100Z", "date_only": false, "value": "2026-04-08T02:01:09.100830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-04-08T02:01:09.100Z", "date_only": false, "value": "2026-04-08T02:01:09.100830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-04-08T02:01:09.100Z", "date_only": false, "value": "2026-04-08T02:01:09.100830+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-08T02:01:12.683Z", "date_only": false, "value": "2026-04-08T02:01:12.683211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-08T02:01:16.213Z", "date_only": false, "value": "2026-04-08T02:01:16.213799+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T02:01:19.572Z", "date_only": false, "value": "2026-04-08T02:01:19.572351+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-04-08T02:01:22.896Z", "date_only": false, "value": "2026-04-08T02:01:22.896153+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-08T02:01:22.896Z", "date_only": false, "value": "2026-04-08T02:01:22.896153+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-08T02:01:29.491Z", "date_only": false, "value": "2026-04-08T02:01:29.491546+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-08T02:01:29.491Z", "date_only": false, "value": "2026-04-08T02:01:29.491546+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-21T16:26:27.381Z", "date_only": false, "value": "2026-04-21T16:26:27.381000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-04-21T16:26:27.381Z", "date_only": false, "value": "2026-04-21T16:26:27.381000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-04-21T17:02:07.015Z", "date_only": false, "value": "2026-04-21T17:02:07.015859+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-04-21T17:02:07.015Z", "date_only": false, "value": "2026-04-21T17:02:07.015859+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-04-21T20:45:24.658Z", "date_only": false, "value": "2026-04-21T20:45:24.658000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-04-21T20:45:24.658Z", "date_only": false, "value": "2026-04-21T20:45:24.658000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-04-21T21:02:16.557Z", "date_only": false, "value": "2026-04-21T21:02:16.557479+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-04-21T21:02:16.557Z", "date_only": false, "value": "2026-04-21T21:02:16.557479+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-07T19:41:17.631Z", "date_only": false, "value": "2026-05-07T19:41:17.631000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-05-07T19:41:17.631Z", "date_only": false, "value": "2026-05-07T19:41:17.631000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-05-07T19:41:18.615Z", "date_only": false, "value": "2026-05-07T19:41:18.615000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-05-07T19:41:18.615Z", "date_only": false, "value": "2026-05-07T19:41:18.615000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-05-07T19:41:18.615Z", "date_only": false, "value": "2026-05-07T19:41:18.615000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-05-07T19:41:18.615Z", "date_only": false, "value": "2026-05-07T19:41:18.615000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-05-07T19:41:19.285Z", "date_only": false, "value": "2026-05-07T19:41:19.285000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-05-07T19:41:19.285Z", "date_only": false, "value": "2026-05-07T19:41:19.285000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-05-07T19:41:19.285Z", "date_only": false, "value": "2026-05-07T19:41:19.285000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-07T19:41:19.854Z", "date_only": false, "value": "2026-05-07T19:41:19.854000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-05-07T19:41:19.854Z", "date_only": false, "value": "2026-05-07T19:41:19.854000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-05-07T19:41:19.854Z", "date_only": false, "value": "2026-05-07T19:41:19.854000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-05-07T19:41:19.854Z", "date_only": false, "value": "2026-05-07T19:41:19.854000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-05-07T20:00:51.685Z", "date_only": false, "value": "2026-05-07T20:00:51.685602+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-05-07T20:00:51.685Z", "date_only": false, "value": "2026-05-07T20:00:51.685602+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-05-07T20:00:51.685Z", "date_only": false, "value": "2026-05-07T20:00:51.685602+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-05-07T20:00:51.685Z", "date_only": false, "value": "2026-05-07T20:00:51.685602+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-05-07T20:01:11.324Z", "date_only": false, "value": "2026-05-07T20:01:11.324941+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-05-07T20:01:11.324Z", "date_only": false, "value": "2026-05-07T20:01:11.324941+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-05-07T20:01:27.800Z", "date_only": false, "value": "2026-05-07T20:01:27.800929+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-05-07T20:01:27.800Z", "date_only": false, "value": "2026-05-07T20:01:27.800929+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-05-07T20:01:27.800Z", "date_only": false, "value": "2026-05-07T20:01:27.800929+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-05-07T20:01:27.800Z", "date_only": false, "value": "2026-05-07T20:01:27.800929+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-05-07T20:01:34.913Z", "date_only": false, "value": "2026-05-07T20:01:34.913869+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-05-07T20:01:34.913Z", "date_only": false, "value": "2026-05-07T20:01:34.913869+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-05-07T20:01:34.913Z", "date_only": false, "value": "2026-05-07T20:01:34.913869+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-22T15:01:21.462Z", "date_only": false, "value": "2026-05-22T15:01:21.462000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-22T16:00:52.844Z", "date_only": false, "value": "2026-05-22T16:00:52.844126+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-06-02T22:01:36.954Z", "date_only": false, "value": "2026-06-02T22:01:36.954000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-06-02T22:01:36.954Z", "date_only": false, "value": "2026-06-02T22:01:36.954000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-06-02T22:01:36.954Z", "date_only": false, "value": "2026-06-02T22:01:36.954000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-02T22:01:36.954Z", "date_only": false, "value": "2026-06-02T22:01:36.954000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-06-02T22:01:37.219Z", "date_only": false, "value": "2026-06-02T22:01:37.219000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-06-02T23:01:00.320Z", "date_only": false, "value": "2026-06-02T23:01:00.320527+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-02T23:01:08.992Z", "date_only": false, "value": "2026-06-02T23:01:08.992540+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-06-02T23:01:08.992Z", "date_only": false, "value": "2026-06-02T23:01:08.992540+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-06-02T23:01:08.992Z", "date_only": false, "value": "2026-06-02T23:01:08.992540+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-02T23:01:08.992Z", "date_only": false, "value": "2026-06-02T23:01:08.992540+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-21T19:18:59.755Z", "date_only": false, "value": "2026-07-21T19:18:59.755000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-21T19:18:59.755Z", "date_only": false, "value": "2026-07-21T19:18:59.755000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-21T19:18:59.755Z", "date_only": false, "value": "2026-07-21T19:18:59.755000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-21T19:18:59.755Z", "date_only": false, "value": "2026-07-21T19:18:59.755000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-21T20:01:59.038Z", "date_only": false, "value": "2026-07-21T20:01:59.038876+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-21T20:01:59.038Z", "date_only": false, "value": "2026-07-21T20:01:59.038876+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-21T20:01:59.038Z", "date_only": false, "value": "2026-07-21T20:01:59.038876+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-07-21T20:01:59.038Z", "date_only": false, "value": "2026-07-21T20:01:59.038876+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-08-12T21:22:25.151Z", "date_only": false, "value": "2026-08-12T21:22:25.151000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-08-12T21:41:05.096Z", "date_only": false, "value": "2026-08-12T21:41:05.096460+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-08-13T21:58:52.821Z", "date_only": false, "value": "2026-08-13T21:58:52.821000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-08-13T21:58:52.959Z", "date_only": false, "value": "2026-08-13T21:58:52.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2026-08-13T21:58:52.959Z", "date_only": false, "value": "2026-08-13T21:58:52.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2026-08-13T21:58:52.959Z", "date_only": false, "value": "2026-08-13T21:58:52.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-08-13T21:58:52.959Z", "date_only": false, "value": "2026-08-13T21:58:52.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-08-13T21:58:52.959Z", "date_only": false, "value": "2026-08-13T21:58:52.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-08-13T21:58:52.959Z", "date_only": false, "value": "2026-08-13T21:58:52.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-08-13T21:58:53.092Z", "date_only": false, "value": "2026-08-13T21:58:53.092000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.25.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.25.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-08-13T21:58:53.216Z", "date_only": false, "value": "2026-08-13T21:58:53.216000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:53.354Z", "date_only": false, "value": "2026-08-13T21:58:53.354000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.24.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.24.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-08-13T21:58:53.731Z", "date_only": false, "value": "2026-08-13T21:58:53.731000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-08-13T22:12:37.151Z", "date_only": false, "value": "2026-08-13T22:12:37.151735+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.24.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.24.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-08-13T22:13:18.319Z", "date_only": false, "value": "2026-08-13T22:13:18.319384+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-08-13T22:14:53.561Z", "date_only": false, "value": "2026-08-13T22:14:53.561638+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-08-13T22:16:32.034Z", "date_only": false, "value": "2026-08-13T22:16:32.034590+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.25.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-08-13T22:16:41.928Z", "date_only": false, "value": "2026-08-13T22:16:41.928450+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-08-13T22:16:52.493Z", "date_only": false, "value": "2026-08-13T22:16:52.493058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-08-13T22:16:52.493Z", "date_only": false, "value": "2026-08-13T22:16:52.493058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-08-13T22:16:52.493Z", "date_only": false, "value": "2026-08-13T22:16:52.493058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-08-13T22:16:52.493Z", "date_only": false, "value": "2026-08-13T22:16:52.493058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-08-13T22:16:52.493Z", "date_only": false, "value": "2026-08-13T22:16:52.493058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-08-13T22:16:52.493Z", "date_only": false, "value": "2026-08-13T22:16:52.493058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-09-01T18:19:10.100Z", "date_only": false, "value": "2026-09-01T18:19:10.100000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-09-01T18:19:10.100Z", "date_only": false, "value": "2026-09-01T18:19:10.100000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-09-01T18:41:15.538Z", "date_only": false, "value": "2026-09-01T18:41:15.538515+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-09-01T18:41:15.538Z", "date_only": false, "value": "2026-09-01T18:41:15.538515+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-09-14T16:11:41.401Z", "date_only": false, "value": "2026-09-14T16:11:41.401000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-09-14T16:22:17.356Z", "date_only": false, "value": "2026-09-14T16:22:17.356407+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.36.release_date"}, {"timestamp": "2026-10-08T22:53:57.417Z", "date_only": false, "value": "2026-10-08T22:53:57.417000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.36.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.37.release_date"}, {"timestamp": "2026-10-08T22:53:57.597Z", "date_only": false, "value": "2026-10-08T22:53:57.597000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.37.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.34.release_date"}, {"timestamp": "2026-10-08T22:53:57.787Z", "date_only": false, "value": "2026-10-08T22:53:57.787000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.34.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.35.release_date"}, {"timestamp": "2026-10-08T22:53:57.974Z", "date_only": false, "value": "2026-10-08T22:53:57.974000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.35.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.27.release_date"}, {"timestamp": "2026-10-08T22:53:58.192Z", "date_only": false, "value": "2026-10-08T22:53:58.192000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.27.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.26.release_date"}, {"timestamp": "2026-10-08T22:53:58.586Z", "date_only": false, "value": "2026-10-08T22:53:58.586000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.26.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.38.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.38.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.22.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.15.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.775Z", "date_only": false, "value": "2026-10-08T22:53:58.775000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.33.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.33.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.21.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.18.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:58.959Z", "date_only": false, "value": "2026-10-08T22:53:58.959000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.30.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.30.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.19.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.148Z", "date_only": false, "value": "2026-10-08T22:53:59.148000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.28.release_date"}, {"timestamp": "2026-10-08T22:53:59.334Z", "date_only": false, "value": "2026-10-08T22:53:59.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.28.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.31.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.31.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:53:59.530Z", "date_only": false, "value": "2026-10-08T22:53:59.530000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.29.release_date"}, {"timestamp": "2026-10-08T22:53:59.772Z", "date_only": false, "value": "2026-10-08T22:53:59.772000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.29.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.32.release_date"}, {"timestamp": "2026-10-08T22:53:59.976Z", "date_only": false, "value": "2026-10-08T22:53:59.976000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.32.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.39.release_date"}, {"timestamp": "2026-10-08T22:54:00.230Z", "date_only": false, "value": "2026-10-08T22:54:00.230000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.39.release_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.30.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.30.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:00:51.418Z", "date_only": false, "value": "2026-10-08T23:00:51.418048+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.32.discovery_date"}, {"timestamp": "2026-10-08T23:00:55.470Z", "date_only": false, "value": "2026-10-08T23:00:55.470995+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.32.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.38.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.38.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.22.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.19.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.15.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:00:59.284Z", "date_only": false, "value": "2026-10-08T23:00:59.284728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.39.discovery_date"}, {"timestamp": "2026-10-08T23:01:02.635Z", "date_only": false, "value": "2026-10-08T23:01:02.635561+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.39.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.37.discovery_date"}, {"timestamp": "2026-10-08T23:01:06.022Z", "date_only": false, "value": "2026-10-08T23:01:06.022541+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.37.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.27.discovery_date"}, {"timestamp": "2026-10-08T23:01:09.199Z", "date_only": false, "value": "2026-10-08T23:01:09.199211+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.27.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.28.discovery_date"}, {"timestamp": "2026-10-08T23:01:13.561Z", "date_only": false, "value": "2026-10-08T23:01:13.561809+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.28.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.33.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.33.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.21.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.18.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:17.316Z", "date_only": false, "value": "2026-10-08T23:01:17.316758+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.35.discovery_date"}, {"timestamp": "2026-10-08T23:01:20.452Z", "date_only": false, "value": "2026-10-08T23:01:20.452497+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.35.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.34.discovery_date"}, {"timestamp": "2026-10-08T23:01:23.734Z", "date_only": false, "value": "2026-10-08T23:01:23.734635+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.34.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.31.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.31.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-10-08T23:01:28.964Z", "date_only": false, "value": "2026-10-08T23:01:28.964317+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.29.discovery_date"}, {"timestamp": "2026-10-08T23:01:32.835Z", "date_only": false, "value": "2026-10-08T23:01:32.835933+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.29.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.36.discovery_date"}, {"timestamp": "2026-10-08T23:01:36.563Z", "date_only": false, "value": "2026-10-08T23:01:36.563246+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.36.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.26.discovery_date"}, {"timestamp": "2026-10-08T23:01:40.419Z", "date_only": false, "value": "2026-10-08T23:01:40.419728+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.26.discovery_date"}, {"timestamp": "2026-10-11T13:26:06.450Z", "date_only": false, "value": "2026-10-11T13:26:06.450000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-11T13:41:05.673Z", "date_only": false, "value": "2026-10-11T13:41:05.673476+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-17T13:43:28.599Z", "date_only": false, "value": "2026-10-17T13:43:28.599Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111943", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-19T12:00:00Z", "date_only": false, "value": "2026-10-19T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2026-0381", "record": "RUSTSEC-2026-0381", "field": "published"}, {"timestamp": "2026-10-19T12:00:00Z", "date_only": false, "value": "2026-10-19T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2026-0383", "record": "RUSTSEC-2026-0383", "field": "published"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:86093", "record": "ALSA-2026:86093", "field": "published"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:86196", "record": "ALSA-2026:86196", "field": "published"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:86203", "record": "ALSA-2026:86203", "field": "published"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.40.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.40.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.23.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.20.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.16.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.14.release_date"}, {"timestamp": "2026-10-20T02:00:00Z", "date_only": false, "value": "2026-10-20T02:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-20T09:01:55.916Z", "date_only": false, "value": "2026-10-20T09:01:55.916000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-20T09:01:55.916Z", "date_only": false, "value": "2026-10-20T09:01:55.916000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.17.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.40.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.40.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.23.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.20.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.16.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.14.discovery_date"}, {"timestamp": "2026-10-20T09:38:36.160Z", "date_only": false, "value": "2026-10-20T09:38:36.160000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-20T09:59:54Z", "date_only": false, "value": "2026-10-20T09:59:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-20T09:59:54Z", "date_only": false, "value": "2026-10-20T09:59:54+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-20T09:59:54Z", "date_only": false, "value": "2026-10-20T09:59:54+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-20T11:46:38.930Z", "date_only": false, "value": "2026-10-20T11:46:38.930049Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117473070125318321", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "4c215e3a-fbcd-489f-9830-7dccf32f00ee", "content": "New Go security releases added explicit distrust for some specific intermediate CA certificates belonging to eMudhra Technologies Limited. Interestingly, this is tracked as CVE-2026-111943 but no details on why this was done are provided.\nhttps://github.com/golang/go/commit/7f86f957633ee31a1c17a1eb8452ca7a3d9bc141\n#pki #CVE_2026_111943 #infosec #cybersecurity", "url": "https://infosec.exchange/users/harrysintonen/statuses/117473070125318321"}, {"timestamp": "2026-10-20T12:00:00Z", "date_only": false, "value": "2026-10-20T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2026-0382", "record": "RUSTSEC-2026-0382", "field": "published"}, {"timestamp": "2026-10-20T13:00:00Z", "date_only": false, "value": "2026-10-20T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-20T13:00:00Z", "date_only": false, "value": "2026-10-20T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.17.release_date"}, {"timestamp": "2026-10-20T13:40:36.809Z", "date_only": false, "value": "2026-10-20T13:40:36.809269Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117473518252418491", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "5ee0ba0e-76f2-4cc4-9242-3318684307c2", "content": "Mitigating CVE-2026-111943 on macOS:\n- Launch KeyChain Access and remove trust for \"emSign *\" roots in System Keychains/System Roots- Edit /etc/ssl/cert.pem and remove all eMudhra certificates.\nNOTE: Some applications may still include their own, embeeded ca-bundle files.\n#CVE_2026_111943", "url": "https://infosec.exchange/users/harrysintonen/statuses/117473518252418491"}, {"timestamp": "2026-10-20T14:01:18Z", "date_only": false, "value": "2026-10-20T14:01:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-20T14:01:18Z", "date_only": false, "value": "2026-10-20T14:01:18+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-20T14:01:18Z", "date_only": false, "value": "2026-10-20T14:01:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-20T14:09:08.343Z", "date_only": false, "value": "2026-10-20T14:09:08.343957Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117473630410416077", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "fad8f585-bec4-42ce-9b15-d758b15ae1c8", "content": "Mitigating CVE-2026-111943 on #Debian:\n- sudo dpkg-reconfigure ca-certificates- Select \"ask\" and deselect the following entries: mozilla/emSign_ECC_Root_CA_-_C3.crt mozilla/emSign_ECC_Root_CA_-_G3.crt mozilla/emSign_Root_CA_-_C1.crt mozilla/emSign_Root_CA_-_G1.crt- Hit <Ok>\nAlternatively you can edit /etc/ca-certificates.conf manually and add the specific entries:\n!mozilla/emSign_ECC_Root_CA_-_C3.crt!mozilla/emSign_ECC_Root_CA_-_G3.crt!mozilla/emSign_Root_CA_-_C1.crt!mozilla/emSign_Root_CA_-_G1.crt\n...and sudo update-ca-certificates\n#CVE_2026_111943", "url": "https://infosec.exchange/users/harrysintonen/statuses/117473630410416077"}, {"timestamp": "2026-10-20T15:19:57Z", "date_only": false, "value": "2026-10-20T15:19:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/UlisesGascon/10ed0724930e5382b3ed48fa2b0d3e02", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "53a21f01-6d47-408f-aecc-5ef283847225", "content": "# eMudhra/emSign intermediate key compromise (Oct 2026): what a root store update does and does not cover\n\nOn 18\u201319 October 2026 eMudhra revoked eight of its emSign intermediate CAs for\n`cACompromise`. Go shipped a key-based block (CVE-2026-111943,\n[golang/go#82345](https://github.com/golang/go/issues/82345)), Electron\nfollowed ([electron/electron#55126](https://github.com/electron/electron/pull/55126)),\nand Node.js is landing the same approach in\n[nodejs/node#66871](https://github.com/nodejs/node/pull/66871). Mozilla removed\nthree emSign roots in NSS 3.131.1 and certifi 2026.10.18 did the same.\n\nA reasonable question came up: *isn't the root removal enough?* The answer\ndepends on which trust store you use. The script below lets anyone check it in\na minute, in a throwaway container, using only public data.\n\n## Run it\n\n```sh\ncurl -sSLO https://gist.githubusercontent.com/UlisesGascon/10ed0724930e5382b3ed48fa2b0d3e02/raw/check-emsign.sh\ndocker run --rm -v \"$PWD:/work\" -w /work node:22 bash check-emsign.sh\n```\n\nIt is read-only: it downloads two public CCADB reports (Mozilla's revoked and\nall intermediate certificate lists, with PEMs), extracts the certificates, and\nruns `openssl verify` against two trust stores with all defaults disabled\n(`-no-CAfile -no-CApath -no-CAstore`). It never touches the host.\n\n## What it shows\n\n1. **The same eight keys are certified by two different issuers.** Each\n   compromised CA (`EM DV/OV/EV TLS CA - G3B/G3C`, `EM OV CS CA - G3B/G3C`) has\n   one certificate issued by an emSign root and one cross-signed by Sectigo's\n   `AAA Certificate Services`. Both sets are revoked. Their SubjectPublicKeyInfo\n   SHA-256 hashes are identical, and they are exactly the eight hashes Go,\n   Chrome's CRLSet and nodejs/node#66871 block.\n\n2. **Node's bundled root store trusts the emSign path today.** Node 22.23.3\n   ships the four emSign roots, and all eight emSign-issued intermediates\n   verify against it (`emSign Root TLS CA - G3` is itself an intermediate under\n   `emSign ECC Root CA - G3`). The Sectigo cross-signed copies do *not* verify:\n   Mozilla trusts `AAA Certificate Services` for email only, and Node's bundle\n   takes only TLS-trusted roots. So for Node's default store, removing\n   `emSign ECC Root CA - G3` (NSS 3.131.1) closes the only path. The same holds\n   for Firefox, certifi and Ubuntu's `ca-certificates`.\n\n3. **The Debian system store trusts the Sectigo path.** Debian 12 and 13, and\n   therefore the official `node:22`, `node:24` and `node:26` images, ship\n   `AAA Certificate Services` in `/etc/ssl/certs/ca-certificates.crt` as a\n   TLS-trusted root. All eight Sectigo cross-signed copies verify against it.\n   That store is what curl, wget, Go on Linux, Python's `ssl` without certifi,\n   and `node --use-system-ca` / `NODE_EXTRA_CA_CERTS` rely on, and none of\n   them check revocation by default. Removing the emSign roots changes nothing\n   for this path. Windows and Apple stores were not checked here; if they trust\n   `AAA Certificate Services` for TLS, the same applies.\n\n## Conclusion\n\n- Root removal is sufficient wherever the trust store follows Mozilla's trust\n  bits.\n- It is not sufficient wherever `AAA Certificate Services` is trusted for TLS,\n  which includes Debian-based systems. There, only revocation checking or a\n  key-based block stops chains through the compromised keys.\n- Blocking by SPKI catches the key regardless of which root it chains to, which\n  is why Go, Chrome and Node chose it. For Node's default store it is defence in\n  depth; for `--use-system-ca` and custom CA setups it is the fix.\n\n## Data sources\n\n- CCADB revoked intermediates (public, with PEM):\n  https://ccadb.my.salesforce-sites.com/mozilla/PublicIntermediateCertsRevokedWithPEMCSV\n- CCADB all intermediates (public, with PEM):\n  https://ccadb.my.salesforce-sites.com/mozilla/PublicAllIntermediateCertsWithPEMCSV\n- Mozilla included roots and trust bits:\n  https://ccadb.my.salesforce-sites.com/mozilla/IncludedCACertificateReportCSVFormat\n- NSS 3.131.1 announcement:\n  https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs\n- certifi advisory:\n  https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2\n\n## Sample output (node:22, 20 Oct 2026)\n\nSee `run-output.txt`.\n", "url": "https://gist.github.com/UlisesGascon/10ed0724930e5382b3ed48fa2b0d3e02"}, {"timestamp": "2026-10-20T17:30:43Z", "date_only": false, "value": "2026-10-20T17:30:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/swankjesse/de8828e357a4d3fc8ebe1ca14ec2bc9f", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "56e8de57-c131-406d-af7a-8a494cf6ec78", "url": "https://gist.github.com/swankjesse/de8828e357a4d3fc8ebe1ca14ec2bc9f"}, {"timestamp": "2026-10-20T18:40:20.592Z", "date_only": false, "value": "2026-10-20T18:40:20.592043Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/eslerm/statuses/117474696889353455", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "3b75559a-c41e-4bf9-a7ff-5e5386fa77aa", "content": "certifi has a ghsa tho :)https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2\nCVE-2026-111943 appears to be an unpublished \"reserved but public\" CVE", "url": "https://cyberplace.social/users/eslerm/statuses/117474696889353455"}, {"timestamp": "2026-10-20T19:24:19Z", "date_only": false, "value": "2026-10-20T19:24:19Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2026-0382", "record": "RUSTSEC-2026-0382", "field": "modified"}, {"timestamp": "2026-10-20T20:30:32Z", "date_only": false, "value": "2026-10-20T20:30:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-20T20:30:32Z", "date_only": false, "value": "2026-10-20T20:30:32+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-20T20:30:32Z", "date_only": false, "value": "2026-10-20T20:30:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-20T21:14:56Z", "date_only": false, "value": "2026-10-20T21:14:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/sureshg/6e08ab0d7a58d99fb1418e9c3fd332c7", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "6c163a8b-ff12-41b8-a84e-ac95e62221f8", "url": "https://gist.github.com/sureshg/6e08ab0d7a58d99fb1418e9c3fd332c7"}, {"timestamp": "2026-10-20T22:02:52Z", "date_only": false, "value": "2026-10-20T22:02:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-20T22:02:52Z", "date_only": false, "value": "2026-10-20T22:02:52+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-20T22:02:52Z", "date_only": false, "value": "2026-10-20T22:02:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-20T22:57:24Z", "date_only": false, "value": "2026-10-20T22:57:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-20T22:57:24Z", "date_only": false, "value": "2026-10-20T22:57:24+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-20T22:57:24Z", "date_only": false, "value": "2026-10-20T22:57:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12212-1", "record": "OPENSUSE-SU-2026:12212-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12220-1", "record": "OPENSUSE-SU-2026:12220-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12212-1", "record": "OPENSUSE-SU-2026:12212-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12220-1", "record": "OPENSUSE-SU-2026:12220-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12212-1", "record": "OPENSUSE-SU-2026:12212-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12220-1", "record": "OPENSUSE-SU-2026:12220-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12212-1", "record": "OPENSUSE-SU-2026:12212-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12220-1", "record": "OPENSUSE-SU-2026:12220-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T00:04:49.443Z", "date_only": false, "value": "2026-10-21T00:04:49.443827Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:86203", "record": "RLSA-2026:86203", "field": "published"}, {"timestamp": "2026-10-21T00:52:18.359Z", "date_only": false, "value": "2026-10-21T00:52:18.359Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111943", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-21T00:52:18.359Z", "date_only": false, "value": "2026-10-21T00:52:18.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Go", "record": "CVE-2026-111943", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T01:17:20.797Z", "date_only": false, "value": "2026-10-21T01:17:20.797", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111943", "record": "FKIE_CVE-2026-111943", "field": "published"}, {"timestamp": "2026-10-21T01:24:20.498Z", "date_only": false, "value": "2026-10-21T01:24:20.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111943", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-21T01:24:20.498Z", "date_only": false, "value": "2026-10-21T01:24:20.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-111943", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T06:07:46.863Z", "date_only": false, "value": "2026-10-21T06:07:46.863009Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-111943", "record": "BELL-CVE-2026-111943", "field": "published"}, {"timestamp": "2026-10-21T06:20:38Z", "date_only": false, "value": "2026-10-21T06:20:38Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2026-0381", "record": "RUSTSEC-2026-0381", "field": "modified"}, {"timestamp": "2026-10-21T06:20:38Z", "date_only": false, "value": "2026-10-21T06:20:38Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2026-0383", "record": "RUSTSEC-2026-0383", "field": "modified"}, {"timestamp": "2026-10-21T09:58:22Z", "date_only": false, "value": "2026-10-21T09:58:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T09:58:22Z", "date_only": false, "value": "2026-10-21T09:58:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T09:58:22Z", "date_only": false, "value": "2026-10-21T09:58:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T10:04:06Z", "date_only": false, "value": "2026-10-21T10:04:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T10:05:16Z", "date_only": false, "value": "2026-10-21T10:05:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T10:05:16Z", "date_only": false, "value": "2026-10-21T10:05:16+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T10:05:16Z", "date_only": false, "value": "2026-10-21T10:05:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T10:10:19Z", "date_only": false, "value": "2026-10-21T10:10:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T10:42:40Z", "date_only": false, "value": "2026-10-21T10:42:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T10:42:40Z", "date_only": false, "value": "2026-10-21T10:42:40+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T10:42:40Z", "date_only": false, "value": "2026-10-21T10:42:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T10:45:19Z", "date_only": false, "value": "2026-10-21T10:45:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T10:52:22Z", "date_only": false, "value": "2026-10-21T10:52:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T10:52:22Z", "date_only": false, "value": "2026-10-21T10:52:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T10:52:22Z", "date_only": false, "value": "2026-10-21T10:52:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T10:57:28Z", "date_only": false, "value": "2026-10-21T10:57:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:05:18Z", "date_only": false, "value": "2026-10-21T11:05:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:05:18Z", "date_only": false, "value": "2026-10-21T11:05:18+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:05:18Z", "date_only": false, "value": "2026-10-21T11:05:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:10:31Z", "date_only": false, "value": "2026-10-21T11:10:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:13:45Z", "date_only": false, "value": "2026-10-21T11:13:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:13:45Z", "date_only": false, "value": "2026-10-21T11:13:45+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:13:45Z", "date_only": false, "value": "2026-10-21T11:13:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:15:22Z", "date_only": false, "value": "2026-10-21T11:15:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:15:22Z", "date_only": false, "value": "2026-10-21T11:15:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:15:22Z", "date_only": false, "value": "2026-10-21T11:15:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:18:46Z", "date_only": false, "value": "2026-10-21T11:18:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:20:41Z", "date_only": false, "value": "2026-10-21T11:20:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:22:36Z", "date_only": false, "value": "2026-10-21T11:22:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:22:36Z", "date_only": false, "value": "2026-10-21T11:22:36+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:22:36Z", "date_only": false, "value": "2026-10-21T11:22:36+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:25:20Z", "date_only": false, "value": "2026-10-21T11:25:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:30:04Z", "date_only": false, "value": "2026-10-21T11:30:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:30:04Z", "date_only": false, "value": "2026-10-21T11:30:04+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:30:04Z", "date_only": false, "value": "2026-10-21T11:30:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:35:20Z", "date_only": false, "value": "2026-10-21T11:35:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:37:56Z", "date_only": false, "value": "2026-10-21T11:37:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:37:56Z", "date_only": false, "value": "2026-10-21T11:37:56+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:37:56Z", "date_only": false, "value": "2026-10-21T11:37:56+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:38:27Z", "date_only": false, "value": "2026-10-21T11:38:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:38:27Z", "date_only": false, "value": "2026-10-21T11:38:27+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:38:27Z", "date_only": false, "value": "2026-10-21T11:38:27+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:40:35Z", "date_only": false, "value": "2026-10-21T11:40:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:40:35Z", "date_only": false, "value": "2026-10-21T11:40:35+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:40:35Z", "date_only": false, "value": "2026-10-21T11:40:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:41:09Z", "date_only": false, "value": "2026-10-21T11:41:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:43:17Z", "date_only": false, "value": "2026-10-21T11:43:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:45:54Z", "date_only": false, "value": "2026-10-21T11:45:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:48:08Z", "date_only": false, "value": "2026-10-21T11:48:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:48:08Z", "date_only": false, "value": "2026-10-21T11:48:08+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:48:08Z", "date_only": false, "value": "2026-10-21T11:48:08+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:49:25Z", "date_only": false, "value": "2026-10-21T11:49:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:49:25Z", "date_only": false, "value": "2026-10-21T11:49:25+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:49:25Z", "date_only": false, "value": "2026-10-21T11:49:25+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:50:53Z", "date_only": false, "value": "2026-10-21T11:50:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:50:53Z", "date_only": false, "value": "2026-10-21T11:50:53+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:50:53Z", "date_only": false, "value": "2026-10-21T11:50:53+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:50:56Z", "date_only": false, "value": "2026-10-21T11:50:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:52:05Z", "date_only": false, "value": "2026-10-21T11:52:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:56:11Z", "date_only": false, "value": "2026-10-21T11:56:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T11:56:54Z", "date_only": false, "value": "2026-10-21T11:56:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:56:54Z", "date_only": false, "value": "2026-10-21T11:56:54+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:56:54Z", "date_only": false, "value": "2026-10-21T11:56:54+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:57:19Z", "date_only": false, "value": "2026-10-21T11:57:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:57:19Z", "date_only": false, "value": "2026-10-21T11:57:19+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:57:19Z", "date_only": false, "value": "2026-10-21T11:57:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:57:49Z", "date_only": false, "value": "2026-10-21T11:57:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:57:49Z", "date_only": false, "value": "2026-10-21T11:57:49+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:57:49Z", "date_only": false, "value": "2026-10-21T11:57:49+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T11:58:40Z", "date_only": false, "value": "2026-10-21T11:58:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T11:58:40Z", "date_only": false, "value": "2026-10-21T11:58:40+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T11:58:40Z", "date_only": false, "value": "2026-10-21T11:58:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:00:26Z", "date_only": false, "value": "2026-10-21T12:00:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:01:20Z", "date_only": false, "value": "2026-10-21T12:01:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:02:11Z", "date_only": false, "value": "2026-10-21T12:02:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:02:26Z", "date_only": false, "value": "2026-10-21T12:02:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:04:27Z", "date_only": false, "value": "2026-10-21T12:04:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:04:27Z", "date_only": false, "value": "2026-10-21T12:04:27+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:04:27Z", "date_only": false, "value": "2026-10-21T12:04:27+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:04:55Z", "date_only": false, "value": "2026-10-21T12:04:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:04:55Z", "date_only": false, "value": "2026-10-21T12:04:55+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:04:55Z", "date_only": false, "value": "2026-10-21T12:04:55+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:07:03Z", "date_only": false, "value": "2026-10-21T12:07:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:07:32Z", "date_only": false, "value": "2026-10-21T12:07:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:09:46Z", "date_only": false, "value": "2026-10-21T12:09:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:09:46Z", "date_only": false, "value": "2026-10-21T12:09:46+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:09:46Z", "date_only": false, "value": "2026-10-21T12:09:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:10:22Z", "date_only": false, "value": "2026-10-21T12:10:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:10:22Z", "date_only": false, "value": "2026-10-21T12:10:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:10:22Z", "date_only": false, "value": "2026-10-21T12:10:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:10:30Z", "date_only": false, "value": "2026-10-21T12:10:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:10:30Z", "date_only": false, "value": "2026-10-21T12:10:30+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:10:30Z", "date_only": false, "value": "2026-10-21T12:10:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:11:24Z", "date_only": false, "value": "2026-10-21T12:11:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:11:24Z", "date_only": false, "value": "2026-10-21T12:11:24+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:11:24Z", "date_only": false, "value": "2026-10-21T12:11:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:11:39Z", "date_only": false, "value": "2026-10-21T12:11:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:11:39Z", "date_only": false, "value": "2026-10-21T12:11:39+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:11:39Z", "date_only": false, "value": "2026-10-21T12:11:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:12:39Z", "date_only": false, "value": "2026-10-21T12:12:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:13:23Z", "date_only": false, "value": "2026-10-21T12:13:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:13:23Z", "date_only": false, "value": "2026-10-21T12:13:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:14:08Z", "date_only": false, "value": "2026-10-21T12:14:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:14:15Z", "date_only": false, "value": "2026-10-21T12:14:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:14:15Z", "date_only": false, "value": "2026-10-21T12:14:15+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:14:15Z", "date_only": false, "value": "2026-10-21T12:14:15+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:14:26Z", "date_only": false, "value": "2026-10-21T12:14:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:16:38Z", "date_only": false, "value": "2026-10-21T12:16:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:16:38Z", "date_only": false, "value": "2026-10-21T12:16:38+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:16:38Z", "date_only": false, "value": "2026-10-21T12:16:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:18:14Z", "date_only": false, "value": "2026-10-21T12:18:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:18:14Z", "date_only": false, "value": "2026-10-21T12:18:14+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:18:14Z", "date_only": false, "value": "2026-10-21T12:18:14+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:19:22Z", "date_only": false, "value": "2026-10-21T12:19:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:19:22Z", "date_only": false, "value": "2026-10-21T12:19:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:19:22Z", "date_only": false, "value": "2026-10-21T12:19:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:19:41Z", "date_only": false, "value": "2026-10-21T12:19:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:21:43Z", "date_only": false, "value": "2026-10-21T12:21:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:21:59Z", "date_only": false, "value": "2026-10-21T12:21:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:22:45Z", "date_only": false, "value": "2026-10-21T12:22:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:22:45Z", "date_only": false, "value": "2026-10-21T12:22:45+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:22:45Z", "date_only": false, "value": "2026-10-21T12:22:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:23:04Z", "date_only": false, "value": "2026-10-21T12:23:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:23:04Z", "date_only": false, "value": "2026-10-21T12:23:04+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:23:04Z", "date_only": false, "value": "2026-10-21T12:23:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:24:27Z", "date_only": false, "value": "2026-10-21T12:24:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:25:34Z", "date_only": false, "value": "2026-10-21T12:25:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:25:34Z", "date_only": false, "value": "2026-10-21T12:25:34+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:25:34Z", "date_only": false, "value": "2026-10-21T12:25:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:28:22Z", "date_only": false, "value": "2026-10-21T12:28:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:28:56Z", "date_only": false, "value": "2026-10-21T12:28:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:30:42Z", "date_only": false, "value": "2026-10-21T12:30:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:49:14Z", "date_only": false, "value": "2026-10-21T12:49:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:49:14Z", "date_only": false, "value": "2026-10-21T12:49:14+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:49:14Z", "date_only": false, "value": "2026-10-21T12:49:14+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:51:23Z", "date_only": false, "value": "2026-10-21T12:51:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:51:23Z", "date_only": false, "value": "2026-10-21T12:51:23+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:51:23Z", "date_only": false, "value": "2026-10-21T12:51:23+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:55:25Z", "date_only": false, "value": "2026-10-21T12:55:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T12:55:50Z", "date_only": false, "value": "2026-10-21T12:55:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T12:55:50Z", "date_only": false, "value": "2026-10-21T12:55:50+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T12:55:50Z", "date_only": false, "value": "2026-10-21T12:55:50+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T12:56:36Z", "date_only": false, "value": "2026-10-21T12:56:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:01:08Z", "date_only": false, "value": "2026-10-21T13:01:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:03:44Z", "date_only": false, "value": "2026-10-21T13:03:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:03:44Z", "date_only": false, "value": "2026-10-21T13:03:44+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:03:44Z", "date_only": false, "value": "2026-10-21T13:03:44+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:04:01Z", "date_only": false, "value": "2026-10-21T13:04:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:04:01Z", "date_only": false, "value": "2026-10-21T13:04:01+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:04:01Z", "date_only": false, "value": "2026-10-21T13:04:01+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:06:37Z", "date_only": false, "value": "2026-10-21T13:06:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:06:42Z", "date_only": false, "value": "2026-10-21T13:06:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:14:54Z", "date_only": false, "value": "2026-10-21T13:14:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:14:54Z", "date_only": false, "value": "2026-10-21T13:14:54+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:14:54Z", "date_only": false, "value": "2026-10-21T13:14:54+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:18:55Z", "date_only": false, "value": "2026-10-21T13:18:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:18:55Z", "date_only": false, "value": "2026-10-21T13:18:55+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:18:55Z", "date_only": false, "value": "2026-10-21T13:18:55+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:24:39Z", "date_only": false, "value": "2026-10-21T13:24:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:24:39Z", "date_only": false, "value": "2026-10-21T13:24:39+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:24:39Z", "date_only": false, "value": "2026-10-21T13:24:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:24:59Z", "date_only": false, "value": "2026-10-21T13:24:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:44:10Z", "date_only": false, "value": "2026-10-21T13:44:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:44:10Z", "date_only": false, "value": "2026-10-21T13:44:10+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:44:10Z", "date_only": false, "value": "2026-10-21T13:44:10+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:47:21Z", "date_only": false, "value": "2026-10-21T13:47:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:50:43Z", "date_only": false, "value": "2026-10-21T13:50:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:50:43Z", "date_only": false, "value": "2026-10-21T13:50:43+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:50:43Z", "date_only": false, "value": "2026-10-21T13:50:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:52:17Z", "date_only": false, "value": "2026-10-21T13:52:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T13:52:17Z", "date_only": false, "value": "2026-10-21T13:52:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T13:52:17Z", "date_only": false, "value": "2026-10-21T13:52:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T13:53:20Z", "date_only": false, "value": "2026-10-21T13:53:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T13:57:43Z", "date_only": false, "value": "2026-10-21T13:57:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T14:29:34Z", "date_only": false, "value": "2026-10-21T14:29:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:29:34Z", "date_only": false, "value": "2026-10-21T14:29:34+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:29:34Z", "date_only": false, "value": "2026-10-21T14:29:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:30:18Z", "date_only": false, "value": "2026-10-21T14:30:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:30:18Z", "date_only": false, "value": "2026-10-21T14:30:18+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:30:18Z", "date_only": false, "value": "2026-10-21T14:30:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:32:27Z", "date_only": false, "value": "2026-10-21T14:32:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T14:34:48Z", "date_only": false, "value": "2026-10-21T14:34:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:34:48Z", "date_only": false, "value": "2026-10-21T14:34:48+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:34:48Z", "date_only": false, "value": "2026-10-21T14:34:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:39:16Z", "date_only": false, "value": "2026-10-21T14:39:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:39:16Z", "date_only": false, "value": "2026-10-21T14:39:16+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:39:16Z", "date_only": false, "value": "2026-10-21T14:39:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:42:10Z", "date_only": false, "value": "2026-10-21T14:42:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:42:10Z", "date_only": false, "value": "2026-10-21T14:42:10+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:42:10Z", "date_only": false, "value": "2026-10-21T14:42:10+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:47:22Z", "date_only": false, "value": "2026-10-21T14:47:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T14:47:48Z", "date_only": false, "value": "2026-10-21T14:47:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:47:48Z", "date_only": false, "value": "2026-10-21T14:47:48+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:47:48Z", "date_only": false, "value": "2026-10-21T14:47:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:58:43Z", "date_only": false, "value": "2026-10-21T14:58:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:58:43Z", "date_only": false, "value": "2026-10-21T14:58:43+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:58:43Z", "date_only": false, "value": "2026-10-21T14:58:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T14:59:00Z", "date_only": false, "value": "2026-10-21T14:59:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T14:59:00Z", "date_only": false, "value": "2026-10-21T14:59:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T14:59:00Z", "date_only": false, "value": "2026-10-21T14:59:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T15:01:20Z", "date_only": false, "value": "2026-10-21T15:01:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T15:01:48Z", "date_only": false, "value": "2026-10-21T15:01:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T15:33:00.383Z", "date_only": false, "value": "2026-10-21T15:33:00.383000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.endorlabs.com/learn/emudhra-intermediate-ca-compromise-the-trust-stores-you-patched-and-the-ones-you-didnt-know-you-had", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "b2edc68d-eb35-4416-b8da-de04c7be0ca9", "url": "https://www.endorlabs.com/learn/emudhra-intermediate-ca-compromise-the-trust-stores-you-patched-and-the-ones-you-didnt-know-you-had"}, {"timestamp": "2026-10-21T15:35:46Z", "date_only": false, "value": "2026-10-21T15:35:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T15:35:46Z", "date_only": false, "value": "2026-10-21T15:35:46+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T15:35:46Z", "date_only": false, "value": "2026-10-21T15:35:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T15:38:26Z", "date_only": false, "value": "2026-10-21T15:38:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T16:16:44.880Z", "date_only": false, "value": "2026-10-21T16:16:44.880932Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117479794561245226", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "6e7d566c-2191-4c01-9eb1-6ced521ffa6a", "content": "CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111943https://go.dev/cl/851047https://go.dev/issue/82345https://groups.google.com/g/golang-announce/c/66pojueaQekhttps://pkg.go.dev/vuln/GO-2026-6809#go #Gostandardlibrary #crypto/x509#CVE_2026_111943#bot", "url": "https://infosec.exchange/users/cve/statuses/117479794561245226"}, {"timestamp": "2026-10-21T17:00:30Z", "date_only": false, "value": "2026-10-21T17:00:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T17:00:30Z", "date_only": false, "value": "2026-10-21T17:00:30+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T17:00:30Z", "date_only": false, "value": "2026-10-21T17:00:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T17:06:10Z", "date_only": false, "value": "2026-10-21T17:06:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-21T18:36:18Z", "date_only": false, "value": "2026-10-21T18:36:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T18:36:18Z", "date_only": false, "value": "2026-10-21T18:36:18+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T18:36:18Z", "date_only": false, "value": "2026-10-21T18:36:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T19:37:47Z", "date_only": false, "value": "2026-10-21T19:37:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T19:37:47Z", "date_only": false, "value": "2026-10-21T19:37:47+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-21T19:37:47Z", "date_only": false, "value": "2026-10-21T19:37:47+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T21:27:57Z", "date_only": false, "value": "2026-10-21T21:27:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:24359-1", "record": "SUSE-SU-2026:24359-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T21:27:57Z", "date_only": false, "value": "2026-10-21T21:27:57Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:24359-1", "record": "SUSE-SU-2026:24359-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-21T21:27:57Z", "date_only": false, "value": "2026-10-21T21:27:57Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:24359-1", "record": "SUSE-SU-2026:24359-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T21:27:57Z", "date_only": false, "value": "2026-10-21T21:27:57Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:24359-1", "record": "SUSE-SU-2026:24359-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T21:28:31Z", "date_only": false, "value": "2026-10-21T21:28:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22152-1", "record": "OPENSUSE-SU-2026:22152-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T21:28:31Z", "date_only": false, "value": "2026-10-21T21:28:31Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22152-1", "record": "OPENSUSE-SU-2026:22152-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-21T21:28:31Z", "date_only": false, "value": "2026-10-21T21:28:31Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22152-1", "record": "OPENSUSE-SU-2026:22152-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T21:28:31Z", "date_only": false, "value": "2026-10-21T21:28:31Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22152-1", "record": "OPENSUSE-SU-2026:22152-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T21:29:42Z", "date_only": false, "value": "2026-10-21T21:29:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22153-1", "record": "OPENSUSE-SU-2026:22153-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T21:29:42Z", "date_only": false, "value": "2026-10-21T21:29:42Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22153-1", "record": "OPENSUSE-SU-2026:22153-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-21T21:29:42Z", "date_only": false, "value": "2026-10-21T21:29:42Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22153-1", "record": "OPENSUSE-SU-2026:22153-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T21:29:42Z", "date_only": false, "value": "2026-10-21T21:29:42Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22153-1", "record": "OPENSUSE-SU-2026:22153-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-21T21:38:08Z", "date_only": false, "value": "2026-10-21T21:38:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:24360-1", "record": "SUSE-SU-2026:24360-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-21T21:38:08Z", "date_only": false, "value": "2026-10-21T21:38:08Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:24360-1", "record": "SUSE-SU-2026:24360-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-21T21:38:08Z", "date_only": false, "value": "2026-10-21T21:38:08Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:24360-1", "record": "SUSE-SU-2026:24360-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T21:38:08Z", "date_only": false, "value": "2026-10-21T21:38:08Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:24360-1", "record": "SUSE-SU-2026:24360-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12226-1", "record": "OPENSUSE-SU-2026:12226-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12226-1", "record": "OPENSUSE-SU-2026:12226-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12226-1", "record": "OPENSUSE-SU-2026:12226-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12226-1", "record": "OPENSUSE-SU-2026:12226-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88188", "record": "ALSA-2026:88188", "field": "published"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88189", "record": "ALSA-2026:88189", "field": "published"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88262", "record": "ALSA-2026:88262", "field": "published"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88280", "record": "ALSA-2026:88280", "field": "published"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88316", "record": "ALSA-2026:88316", "field": "published"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88336", "record": "ALSA-2026:88336", "field": "published"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:88354", "record": "ALSA-2026:88354", "field": "published"}, {"timestamp": "2026-10-22T00:04:07.745Z", "date_only": false, "value": "2026-10-22T00:04:07.745746Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:86196", "record": "RLSA-2026:86196", "field": "published"}, {"timestamp": "2026-10-22T00:08:23.571Z", "date_only": false, "value": "2026-10-22T00:08:23.571327Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:86093", "record": "RLSA-2026:86093", "field": "published"}, {"timestamp": "2026-10-22T06:26:12Z", "date_only": false, "value": "2026-10-22T06:26:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T06:26:12Z", "date_only": false, "value": "2026-10-22T06:26:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T06:26:12Z", "date_only": false, "value": "2026-10-22T06:26:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T07:12:24Z", "date_only": false, "value": "2026-10-22T07:12:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T07:12:24Z", "date_only": false, "value": "2026-10-22T07:12:24+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T07:12:24Z", "date_only": false, "value": "2026-10-22T07:12:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T09:34:36Z", "date_only": false, "value": "2026-10-22T09:34:36Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UU37609", "record": "CLEANSTART-2026-UU37609", "field": "modified"}, {"timestamp": "2026-10-22T10:40:24Z", "date_only": false, "value": "2026-10-22T10:40:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/podhmo/488f4b4f62ad7aa7bbccf6b2fe238ed7", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "cd60ad59-29ae-44a4-88b4-d770efd14546", "content": "# eMudhra \u4e2d\u9593 CA \u6f0f\u3048\u3044\u4e8b\u4ef6\u3001\u81ea\u5206\u306e\u74b0\u5883\u306f\u672c\u5f53\u306b\u5927\u4e08\u592b\u306a\u306e\u304b\u5168\u90e8\u78ba\u304b\u3081\u305f\n\n## TL;DR\n\n- 2026-10-20 \u516c\u8868\u306e **eMudhra\uff08emSign\uff09\u4e2d\u9593 CA 8 \u672c\u306e\u79d8\u5bc6\u9375\u6f0f\u3048\u3044**\u306b\u3064\u3044\u3066\u3001\u624b\u5143\u306e Ubuntu 26.04 \u306f **\u3059\u3067\u306b\u5bfe\u7b56\u6e08\u307f**\u3060\u3063\u305f\u3002\n- \u914d\u5e03\u3055\u308c\u3066\u3044\u308b `proof.zip` \u306e\u7f72\u540d\u306f 8/8 \u691c\u8a3c\u3067\u304d\u3001**\u79d8\u5bc6\u9375\u3092\u5b9f\u969b\u306b\u5fa9\u5143**\u3067\u304d\u305f\uff08d = 156, 230, 115, 56, 66, 237, 155, **4**\uff09\u3002\u4e3b\u5f35\u3069\u304a\u308a\u300c\u6975\u7aef\u306b\u5f31\u3044\u9375\u300d\u3002\n- \u30b7\u30b9\u30c6\u30e0\u306e CA \u30b9\u30c8\u30a2\u306f\u30d1\u30c3\u30c1\u6e08\u307f\u3067\u3001\u691c\u8a3c\u7528 12 \u30db\u30b9\u30c8\u3059\u3079\u3066\u306b\u63a5\u7d9a\u3067\u304d\u306a\u3044\u3002curl / Python / Go \u3082\u62d2\u5426\u3002\n- \u305f\u3060\u3057 **Nix \u540c\u68b1\u306e CA \u30d0\u30f3\u30c9\u30eb\uff08nss-cacert 3.117\uff09\u3060\u3051\u53e4\u304f\u3001emSign \u7cfb 6 \u30c1\u30a7\u30fc\u30f3\u3092\u307e\u3060\u4fe1\u983c\u3057\u3066\u3044\u305f**\u3002\u3053\u3053\u304c\u552f\u4e00\u306e\u6b8b\u5b58\u30ea\u30b9\u30af\u3002\n- \u3053\u306e\u30db\u30b9\u30c8\u306b\u306f ACME \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3082 TLS \u30b5\u30fc\u30d0\u3082\u306a\u304f\u3001\u300c\u8a3c\u660e\u66f8\u66f4\u65b0\u306e\u8a2d\u5b9a\u300d\u7684\u306a\u3082\u306e\u306f\u5b58\u5728\u3057\u306a\u304b\u3063\u305f\u3002\n\n---\n\n## \u524d\u63d0\n\n### \u767a\u7aef\n\n`https://emudhra.we-have-a-problem.com/` \u3092\u958b\u3044\u305f\u306e\u304c\u304d\u3063\u304b\u3051\u3002\u3053\u308c\u306f\u8a3c\u660e\u66f8\u66f4\u65b0\u306e\u8a71\u3067\u306f\u306a\u304f\u3001**eMudhra \u306e\u4e2d\u9593 CA 8 \u672c\u306e\u79d8\u5bc6\u9375\u304c\u5f31\u3044\u4e71\u6570\uff08P-384 \u3067 d < 256\uff09\u3067\u751f\u6210\u3055\u308c\u3001\u516c\u958b\u8a3c\u660e\u66f8\u304b\u3089\u5fa9\u5143\u53ef\u80fd\u3060\u3063\u305f**\u3068\u3044\u3046\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u306e\u307e\u3068\u3081\u30b5\u30a4\u30c8\u3002\n\n\u6f0f\u3048\u3044\u3057\u305f\u4e2d\u9593 CA \u306f\u6b21\u306e 2 \u3064\u306e\u30eb\u30fc\u30c8\u306b\u9023\u9396\u3059\u308b\u3002\n\n- `emSign ECC Root CA - G3`\n- `AAA Certificate Services`\uff08Sectigo \u306e\u30af\u30ed\u30b9\u30b5\u30a4\u30f3\u7d4c\u7531\uff09\n\n\u30d6\u30e9\u30a6\u30b6\u306f OneCRL / CRLSet \u3067 10/17 \u4ee5\u964d\u30d6\u30ed\u30c3\u30af\u6e08\u307f\u3002\u554f\u984c\u306f **\u5931\u52b9\u60c5\u5831\u3092\u898b\u306a\u3044\u975e\u30d6\u30e9\u30a6\u30b6\u30af\u30e9\u30a4\u30a2\u30f3\u30c8**\uff08curl\u3001\u8a00\u8a9e\u30e9\u30f3\u30bf\u30a4\u30e0\u3001\u30b3\u30f3\u30c6\u30ca\u306a\u3069\uff09\u3067\u3001\u4fe1\u983c\u30b9\u30c8\u30a2\u306e\u66f4\u65b0\u304c\u5fc5\u8981\u306b\u306a\u308b\u3002\n\n### \u691c\u8a3c\u306e\u65b9\u91dd\n\n- \u30b5\u30a4\u30c8\u306b\u66f8\u304b\u308c\u3066\u3044\u308b root \u5411\u3051 workaround\uff08`sed` \u3067\u30d6\u30e9\u30c3\u30af\u30ea\u30b9\u30c8\u5316\u3001PowerShell \u306e\u5b9f\u884c\u30dd\u30ea\u30b7\u30fc\u56de\u907f\u306a\u3069\uff09\u306f**\u5b9f\u884c\u3057\u306a\u3044**\u3002\u3059\u3067\u306b\u30d1\u30c3\u30c1\u6e08\u307f\u306a\u3089\u4e0d\u8981\u3060\u3057\u3001Web \u30b5\u30a4\u30c8\u306e\u6307\u793a\u3092\u305d\u306e\u307e\u307e root \u3067\u8d70\u3089\u305b\u308b\u306e\u306f\u7b4b\u304c\u60aa\u3044\u3002\n- \u3084\u308b\u3053\u3068\u306f**\u8aad\u307f\u53d6\u308a\u5c02\u7528\u306e\u78ba\u8a8d**\u3060\u3051\u3002\n- \u300c\u30b5\u30a4\u30c8\u306e\u4e3b\u5f35\u300d\u3068\u300c\u624b\u5143\u306e\u72b6\u614b\u300d\u3092\u5206\u3051\u3066\u78ba\u8a8d\u3059\u308b\u3002\n\n### \u691c\u8a3c\u74b0\u5883\uff08\u30de\u30b9\u30af\u6e08\u307f\uff09\n\n| \u9805\u76ee | \u5024 |\n|---|---|\n| OS | Ubuntu 26.04.1 LTS |\n| ca-certificates | `20260816ubuntu0.26.04.1` |\n| OpenSSL | 3.5.5 |\n| Nix | 2.34.7 |\n| Go | 1.26.8\uff08apt\uff09/ 1.27.1\uff08`~/sdk`\uff09 |\n| Python | 3.14.4\uff08pip \u306a\u3057\uff09 |\n| Node / Docker / uv | \u672a\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb |\n\n\u4f5c\u696d\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306f `$WORK` \u3068\u8868\u8a18\u3059\u308b\u3002Nix \u30b9\u30c8\u30a2\u306e\u30d1\u30b9\u306f `` \u3068\u8868\u8a18\u3059\u308b\u3002\n\n---\n\n## 1. \u4e00\u6b21\u8cc7\u6599\u3092\u53d6\u5f97\u3057\u3066\u7f72\u540d\u3092\u691c\u8a3c\u3059\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\n\u307e\u3068\u3081\u30b5\u30a4\u30c8\u304b\u3089 `proof.zip`\u3001`chains.zip`\u3001`impacted-intermediates.json`\u3001`roots.json` \u3092\u53d6\u5f97\u3057\u3066\u5c55\u958b\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\nmkdir -p \"$WORK/emudhra\" && cd \"$WORK/emudhra\"\nfor f in proof.zip chains.zip impacted-intermediates.json roots.json; do\n  curl -sS -O \"https://emudhra.we-have-a-problem.com/$f\"\ndone\npython3 -m zipfile -e proof.zip proof/\n```\n\n\u5c55\u958b\u3057\u305f `proof/` \u306b\u306f\u30018 \u4e2d\u9593 CA \u306e\u8a3c\u660e\u66f8\u30fb\u516c\u958b\u9375\u30fb\u7f72\u540d\u3068 `message.txt` \u304c\u5165\u3063\u3066\u3044\u308b\u3002\n\n```bash\ncd proof\ncat message.txt\n# We have a problem here - Wayne\n\nfor crt in *.crt.pem; do\n  b=${crt%.crt.pem}\n  openssl x509 -in \"$crt\" -noout -pubkey | diff -q - \"$b.pub.pem\"\n  openssl dgst -sha384 -verify \"$b.pub.pem\" -signature \"$b.sig\" message.txt\ndone\n```\n\n### \u7d50\u679c\n\n**8 \u672c\u3059\u3079\u3066 `Verified OK`**\u3002\u30e1\u30c3\u30bb\u30fc\u30b8\u306b\u5bfe\u3059\u308b\u7f72\u540d\u304c\u3001\u5404\u4e2d\u9593 CA \u306e\u516c\u958b\u9375\u3067\u691c\u8a3c\u3067\u304d\u305f\u3002\u3064\u307e\u308a\u300c\u305d\u306e\u79d8\u5bc6\u9375\u3092\u6301\u3063\u3066\u3044\u308b\u300d\u3053\u3068\u306e\u8a3c\u660e\u306b\u306a\u3063\u3066\u3044\u308b\u3002\n\n---\n\n## 2. \u300c\u9375\u304c\u5f31\u3044\u300d\u3068\u3044\u3046\u4e3b\u5f35\u3092\u3001\u516c\u958b\u9375\u304b\u3089\u79d8\u5bc6\u9375\u3092\u5fa9\u5143\u3057\u3066\u78ba\u304b\u3081\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\n\u30b5\u30a4\u30c8\u306e\u4e3b\u5f35\u306f\u300cP-384 \u306a\u306e\u306b d < 256\u30011 \u672c\u306f d = 4\u300d\u3002\u3053\u308c\u304c\u672c\u5f53\u306a\u3089\u3001\u516c\u958b\u9375\u304b\u3089\u7dcf\u5f53\u305f\u308a\u3067\u79d8\u5bc6\u9375\u3092\u51fa\u305b\u308b\u3002\u5b9f\u969b\u306b\u3084\u3063\u3066\u307f\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\nsecp384r1 \u306e\u6955\u5186\u66f2\u7dda\u6f14\u7b97\u3092\u7d14 Python \u3067\u5b9f\u88c5\u3057\u3001`d = 1..4096` \u306e `dG` \u3092\u8868\u306b\u3057\u3066\u3001\u8a3c\u660e\u66f8\u306e\u516c\u958b\u9375\u30dd\u30a4\u30f3\u30c8\u3068\u4e00\u81f4\u3059\u308b\u3082\u306e\u3092\u63a2\u3059\u3002\n\n```python\nimport subprocess, re, glob\n\np  = 2**384 - 2**128 - 2**96 + 2**32 - 1\na  = p - 3\nGx = 0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7\nGy = 0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f\nG = (Gx, Gy)\n\ndef add(P, Q):\n    if P is None: return Q\n    if Q is None: return P\n    x1, y1 = P; x2, y2 = Q\n    if x1 == x2 and (y1 + y2) % p == 0: return None\n    lam = ((3*x1*x1 + a) * pow(2*y1, -1, p) if P == Q\n           else (y2-y1) * pow(x2-x1, -1, p)) % p\n    x3 = (lam*lam - x1 - x2) % p\n    return (x3, (lam*(x1-x3) - y1) % p)\n\ndef mul(k, P=G):\n    R = None\n    while k:\n        if k & 1: R = add(R, P)\n        P = add(P, P); k >>= 1\n    return R\n\ntable = {mul(k): k for k in range(1, 4097)}\n\nfor pub in sorted(glob.glob(\"*.pub.pem\")):\n    out = subprocess.run([\"openssl\", \"ec\", \"-pubin\", \"-in\", pub, \"-text\", \"-noout\"],\n                         capture_output=True, text=True).stdout\n    h = re.sub(r\"[^0-9a-f]\", \"\",\n               re.search(r\"pub:\\s*(.*?)ASN1 OID\", out, re.S).group(1))\n    x, y = int(h[2:98], 16), int(h[98:], 16)\n    print(pub, \"d =\", table.get((x, y)))\n```\n\n### \u7d50\u679c\n\n```text\nEM-DV-TLS-CA-G3B.pub.pem   d = 156\nEM-DV-TLS-CA-G3C.pub.pem   d = 230\nEM-EV-TLS-CA-G3B.pub.pem   d = 115\nEM-EV-TLS-CA-G3C.pub.pem   d = 56\nEM-OV-CS-CA-G3B.pub.pem    d = 66\nEM-OV-CS-CA-G3C.pub.pem    d = 237\nEM-OV-TLS-CA-G3B.pub.pem   d = 155\nEM-OV-TLS-CA-G3C.pub.pem   d = 4\n```\n\n**\u4e3b\u5f35\u3069\u304a\u308a\u3001\u5168 8 \u672c\u304c d < 256\u3001\u6700\u5f8c\u306e 1 \u672c\u306f d = 4**\u3002\u3053\u308c\u306f\u3082\u3046\u300c\u6f0f\u3048\u3044\u300d\u3068\u3044\u3046\u3088\u308a\u300c\u516c\u958b\u9375\u304c\u79d8\u5bc6\u9375\u305d\u306e\u3082\u306e\u300d\u306b\u8fd1\u3044\u72b6\u614b\u3067\u3001\u4fe1\u983c\u30b9\u30c8\u30a2\u304b\u3089\u5916\u3059\u4ee5\u5916\u306b\u306a\u3044\u3002\n\n---\n\n## 3. \u914d\u5e03\u30c1\u30a7\u30fc\u30f3\u3092\u30aa\u30d5\u30e9\u30a4\u30f3\u3067\u691c\u8a3c\u3059\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\n`chains.zip` \u306b\u306f\u3001\u5404\u30c6\u30b9\u30c8\u30db\u30b9\u30c8\u304c\u5b9f\u969b\u306b\u8fd4\u3057\u305f\u8a3c\u660e\u66f8\u30c1\u30a7\u30fc\u30f3\uff08\u30ea\u30fc\u30d5 \u2192 \u4e2d\u9593 \u2192 \u30eb\u30fc\u30c8\uff09\u304c PEM \u3067\u5165\u3063\u3066\u3044\u308b\u3002README \u306e\u624b\u9806\u306b\u5f93\u3044\u3001\u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2\u3067\u691c\u8a3c\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\ncd \"$WORK/emudhra/chains\"\nfor f in *.pem; do\n  printf '%-45s ' \"${f%.pem}\"\n  openssl verify -show_chain -untrusted \"$f\" \"$f\" >/dev/null 2>&1 \\\n    && echo \"TRUSTED (bad)\" || echo \"rejected (good)\"\ndone\n```\n\n\u5931\u6557\u7406\u7531\u3082\u78ba\u8a8d\u3059\u308b\u3002\n\n```bash\nopenssl verify -show_chain -untrusted dv-g3b-aaa-emudhra.we-have-a-problem.com.pem dv-g3b-aaa-emudhra.we-have-a-problem.com.pem\n# error 20 at 1 depth lookup: unable to get local issuer certificate\n\nopenssl verify -show_chain -untrusted dv-g3b-emudhra.we-have-a-problem.com.pem dv-g3b-emudhra.we-have-a-problem.com.pem\n# error 20 at 2 depth lookup: unable to get local issuer certificate\n```\n\n\u30b7\u30b9\u30c6\u30e0\u30d0\u30f3\u30c9\u30eb\u306b\u3069\u306e\u30eb\u30fc\u30c8\u304c\u5165\u3063\u3066\u3044\u308b\u304b\u3082\u78ba\u8a8d\u3059\u308b\u3002\n\n```bash\npython3 - <<'EOF'\nimport re, subprocess\ndata = open(\"/etc/ssl/certs/ca-certificates.crt\").read()\ncerts = re.findall(r\"-----BEGIN CERTIFICATE-----.*?-----END CERTIFICATE-----\", data, re.S)\nprint(\"total roots:\", len(certs))\nfor c in certs:\n    s = subprocess.run([\"openssl\", \"x509\", \"-noout\", \"-subject\"],\n                       input=c, capture_output=True, text=True).stdout\n    if re.search(r\"AAA|Comodo|Sectigo|USERTrust|emSign|eMudhra\", s, re.I):\n        print(\" \", s.strip())\nEOF\n```\n\n### \u7d50\u679c\n\n- **12/12 \u3059\u3079\u3066 rejected**\u3002\n- \u30b7\u30b9\u30c6\u30e0\u30d0\u30f3\u30c9\u30eb\u306f 120 \u30eb\u30fc\u30c8\u3002\n- `emSign ECC Root CA - G3` \u3068 `AAA Certificate Services` \u306f**\u5b58\u5728\u3057\u306a\u3044**\u3002\n- \u6b8b\u3063\u3066\u3044\u308b `emSign ECC Root CA - C3` / `emSign Root CA - C1` / `emSign Root CA - G1` \u306f\u5225\u30eb\u30fc\u30c8\u3067\u3001\u4eca\u56de\u306e\u6f0f\u3048\u3044\u5bfe\u8c61\u3067\u306f\u306a\u3044\u3002\n\n**\u6559\u8a13**\uff1aPEM \u30d5\u30a1\u30a4\u30eb\u3092 `grep \"emSign\"` \u3057\u3066\u3082\u610f\u5473\u304c\u306a\u3044\uff08\u4ef6\u540d\u306f base64 \u306e\u4e2d\u306b\u306a\u3044\uff09\u3002\u5224\u5b9a\u306f\u5fc5\u305a `openssl verify` \u3067\u3084\u308b\u3002\u5b9f\u969b\u3001\u9014\u4e2d\u3067\u6587\u5b57\u5217 grep \u3092\u3057\u3066\u4e00\u77ac\u30d2\u30e4\u30c3\u3068\u3057\u305f\u304c\u3001\u6700\u7d42\u7684\u306b\u306f verify \u306e\u7d50\u679c\u3092\u6839\u62e0\u306b\u3057\u305f\u3002\n\n---\n\n## 4. \u30aa\u30f3\u30e9\u30a4\u30f3\u3067 12 \u30db\u30b9\u30c8\u306b\u5b9f\u969b\u306b\u63a5\u7d9a\u3057\u3066\u307f\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\n\u30b5\u30a4\u30c8\u306e\u30c1\u30a7\u30c3\u30ab\u30fc\u3068\u540c\u3058 12 \u30db\u30b9\u30c8\u306b curl \u3067\u63a5\u7d9a\u3002\u8a3c\u660e\u66f8\u30a8\u30e9\u30fc\u306b\u306a\u308c\u3070\u300c\u4fe1\u983c\u3057\u3066\u3044\u306a\u3044\u300d\u3068\u5224\u65ad\u3067\u304d\u308b\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\nfor h in dv-g3b-emudhra dv-g3c-emudhra ov-g3b-emudhra ov-g3c-emudhra \\\n         ev-g3b-emudhra ev-g3c-emudhra dv-g3b-aaa-emudhra dv-g3c-aaa-emudhra \\\n         ov-g3b-aaa-emudhra ov-g3c-aaa-emudhra ev-g3b-aaa-emudhra ev-g3c-aaa-emudhra; do\n  printf '%-30s ' \"$h\"\n  if curl -sS -o /dev/null \"https://$h.we-have-a-problem.com/\" 2>/dev/null; then\n    echo \"TRUSTED (bad)\"\n  else\n    echo \"blocked (good)\"\n  fi\ndone\n```\n\n### \u7d50\u679c\n\n**12/12 blocked**\u3002\u30a8\u30e9\u30fc\u306f `unable to get local issuer certificate`\u3002\n\n\u88dc\u8db3\uff1a\u3053\u306e\u30c1\u30a7\u30c3\u30ab\u30fc\u306f\u300c\u63a5\u7d9a\u306b\u6210\u529f\u3057\u305f UA\u300d\u3092\u7d71\u8a08\u3068\u3057\u3066\u8a18\u9332\u3059\u308b\u4ed5\u69d8\u3089\u3057\u3044\u304c\u3001\u4eca\u56de\u306f\u5168\u90e8\u5931\u6557\u3057\u3066\u3044\u308b\u306e\u3067\u8a18\u9332\u5bfe\u8c61\u306b\u306f\u306a\u3063\u3066\u3044\u306a\u3044\u3002\n\n\u540c\u3058\u3053\u3068\u3092 Python \u3068 Go \u3067\u3082\u3084\u3063\u305f\u3002\n\n```bash\npython3 - <<'EOF'\nimport urllib.request\nfor h in [\"dv-g3b-emudhra\", \"dv-g3b-aaa-emudhra\"]:\n    try:\n        urllib.request.urlopen(f\"https://{h}.we-have-a-problem.com/\", timeout=15)\n        print(h, \"TRUSTED (bad)\")\n    except Exception as e:\n        print(h, \"blocked (good):\", type(e).__name__)\nEOF\n```\n\nGo \u306f\u5c0f\u3055\u306a `main.go` \u3092\u66f8\u3044\u3066 `http.Get` \u3059\u308b\u3060\u3051\u3002\u7d50\u679c\u306f\u540c\u3058\u304f\u62d2\u5426\u3002\n\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\t\"net/http\"\n\t\"time\"\n)\n\nfunc main() {\n\tfor _, h := range []string{\"dv-g3b-emudhra\", \"dv-g3b-aaa-emudhra\"} {\n\t\tc := &http.Client{Timeout: 15 * time.Second}\n\t\tif _, err := c.Get(\"https://\" + h + \".we-have-a-problem.com/\"); err != nil {\n\t\t\tfmt.Printf(\"%-24s blocked (good): %v\\n\", h, err)\n\t\t} else {\n\t\t\tfmt.Printf(\"%-24s TRUSTED (bad)\\n\", h)\n\t\t}\n\t}\n}\n```\n\n---\n\n## 5. Ubuntu \u306e\u30d1\u30c3\u30c1\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\nOS \u306e CA \u30b9\u30c8\u30a2\u304c\u4fee\u6b63\u7248\u304b\u3001\u81ea\u52d5\u66f4\u65b0\u304c\u6709\u52b9\u304b\u3092\u78ba\u8a8d\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\ndpkg -l ca-certificates | tail -2\ngrep -n \"emSign_ECC_Root_CA_-_G3\" /etc/ca-certificates.conf\ncat /etc/apt/apt.conf.d/20auto-upgrades\napt-cache policy ca-certificates\n```\n\n\u516c\u5f0f\u60c5\u5831\u3082\u78ba\u8a8d\u3002\n\n```bash\ncurl -sS https://ubuntu.com/security/notices/USN-8944-1 \\\n  | grep -o \"emSign ECC Root CA - G3\" | head -1\n```\n\n### \u7d50\u679c\n\n- `ca-certificates` \u306f `20260816ubuntu0.26.04.1`\uff0826.04 \u306e\u4fee\u6b63\u7248\u3068\u4e00\u81f4\uff09\u3002\n- `/etc/ca-certificates.conf` \u306b `!mozilla/emSign_ECC_Root_CA_-_G3.crt`\uff08`!` \u306f\u7121\u52b9\u5316\uff09\u3002\n- `unattended-upgrades` \u304c\u6709\u52b9\uff08`APT::Periodic::Unattended-Upgrade \"1\"`\uff09\u3002\n- \u4fdd\u7559\u4e2d\u306e `ca-certificates` \u66f4\u65b0\u306a\u3057\u3002\n- USN-8944-1 \u3067\u3082\u300cemSign ECC Root CA - G3 \u3092\u524a\u9664\u300d\u3068\u660e\u8a18\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u3053\u308c\u3067 OS \u5074\u306f\u5b8c\u4e86\u3002\n\n---\n\n## 6. Go \u306e\u300cSPKI \u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u300d\u4e3b\u5f35\u3092\u30bd\u30fc\u30b9\u3067\u78ba\u8a8d\u3059\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\n\u30b5\u30a4\u30c8\u306b\u306f\u300cGo 1.27.3 / 1.26.10 \u3067\u3001\u8a72\u5f53 8 \u4e2d\u9593 CA \u306e SPKI \u30cf\u30c3\u30b7\u30e5\u3092\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3057\u3066\u30d6\u30ed\u30c3\u30af\u300d\u3068\u3042\u308b\u3002\u3053\u308c\u3092\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u3068\u30bd\u30fc\u30b9\u3067\u78ba\u8a8d\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n\u307e\u305a\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u3002\n\n```bash\ncurl -sS https://go.dev/doc/devel/release | grep -A2 'id=\"go1.27.3\"'\ncurl -sS https://go.dev/doc/devel/release | grep -A2 'id=\"go1.26.10\"'\n```\n\n\u6b21\u306b\u3001Go 1.27.3 \u306e\u30bf\u30b0\u304b\u3089 `crypto/x509/verify.go` \u3092\u53d6\u5f97\u3057\u3066\u30d6\u30ed\u30c3\u30af\u30ea\u30b9\u30c8\u3092\u898b\u308b\u3002\n\n```bash\ncurl -sS https://raw.githubusercontent.com/golang/go/go1.27.3/src/crypto/x509/verify.go \\\n  | grep -A12 \"distrustedSPKIHashes\"\n```\n\n\u624b\u5143\u306e 8 \u8a3c\u660e\u66f8\u306e SPKI SHA-256 \u3068\u7a81\u304d\u5408\u308f\u305b\u308b\u3002\n\n```bash\nfor crt in *.crt.pem; do\n  openssl x509 -in \"$crt\" -pubkey -noout \\\n  | openssl pkey -pubin -outform DER \\\n  | sha256sum\ndone\n```\n\n### \u7d50\u679c\n\n`verify.go` \u306b\u306f\u6b21\u306e\u30de\u30c3\u30d7\u304c\u3042\u308b\u3002\n\n```go\nvar distrustedSPKIHashes = map[string]struct{}{\n    \"ebed6475...b5105\": {},\n    \"49dd353d...fe5f\": {},\n    // ...\n}\n```\n\n8 \u30a8\u30f3\u30c8\u30ea\u3059\u3079\u3066\u304c\u3001\u914d\u5e03\u3055\u308c\u305f 8 \u4e2d\u9593 CA \u306e SPKI SHA-256 \u3068**\u5b8c\u5168\u4e00\u81f4**\u3057\u305f\u3002\n\n\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u3082 1.27.3 / 1.26.10\uff08\u3068\u3082\u306b 2026-10-19\uff09\u3067\u300ccrypto/x509 \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fee\u6b63\u300d\u3068\u660e\u8a18\u3002\n\n### \u624b\u5143\u306e Go \u306f\uff1f\n\n```bash\ngo version                        # go1.26.8\n~/sdk/go1.27.1/bin/go version     # go1.27.1\n```\n\n\u3069\u3061\u3089\u3082\u4fee\u6b63\u7248\u3088\u308a\u524d\u3002\u305d\u3053\u3067\u300c\u53e4\u3044 CA \u30d0\u30f3\u30c9\u30eb\u3092\u6307\u3057\u305f\u3089\u4fe1\u983c\u3057\u3066\u3057\u307e\u3046\u304b\u300d\u3092\u5b9f\u9a13\u3057\u305f\u3002\n\n```bash\nNB=\"/...-nss-cacert-3.117/etc/ssl/certs/ca-bundle.crt\"\n\nSSL_CERT_FILE=\"$NB\" go run main.go\nSSL_CERT_FILE=\"$NB\" ~/sdk/go1.27.1/bin/go run main.go\n```\n\n\u7d50\u679c\uff1a\n\n- \u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2\uff08\u30c7\u30d5\u30a9\u30eb\u30c8\uff09\u2192 **blocked**\n- \u53e4\u3044 Nix \u30d0\u30f3\u30c9\u30eb\u3092 `SSL_CERT_FILE` \u3067\u6307\u5b9a \u2192 **1.26.8 \u3082 1.27.1 \u3082 TRUSTED\uff08bad\uff09**\n\n\u3064\u307e\u308a\u3001Linux \u3067\u306f\u666e\u6bb5\u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2\u3092\u4f7f\u3046\u306e\u3067\u5b9f\u5bb3\u306f\u51fa\u3066\u3044\u306a\u3044\u304c\u3001**\u30c4\u30fc\u30eb\u30c1\u30a7\u30fc\u30f3\u81ea\u4f53\u306f\u672a\u30d1\u30c3\u30c1**\u3002Go \u306f\u691c\u8a3c\u30ed\u30b8\u30c3\u30af\u3092\u30d0\u30a4\u30ca\u30ea\u306b\u57cb\u3081\u8fbc\u3080\u306e\u3067\u3001\u914d\u5e03\u7269\u3084\u30b3\u30f3\u30c6\u30ca\u3092\u4f5c\u3063\u3066\u3044\u308b\u306a\u3089 **1.26.10 / 1.27.3 \u4ee5\u964d\u3067\u518d\u30d3\u30eb\u30c9**\u304c\u5fc5\u8981\u3002\n\n\u306a\u304a\u3001`vuln.go.dev/ID/CVE-2026-111943.json` \u306f 404 \u3060\u3063\u305f\u3002\u3053\u306e CVE \u756a\u53f7\u306f\u30b5\u30a4\u30c8\u4e0a\u3067\u306f Chainguard \u306e ca-certificates \u306b\u7d10\u3065\u3044\u3066\u304a\u308a\u3001Go \u306e\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u306f CVE \u756a\u53f7\u3092\u660e\u8a18\u3057\u3066\u3044\u306a\u3044\u3002\u300cGo \u306e CVE \u304c 2026-111943\u300d\u3068\u66f8\u304f\u306e\u306f\u5c11\u3057\u4e0d\u6b63\u78ba\u304b\u3082\u3057\u308c\u306a\u3044\u3002\n\n---\n\n## 7. Node.js \u306e\u8a18\u8f09\u3092\u78ba\u8a8d\u3059\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\nNode \u306f\u3053\u306e\u30de\u30b7\u30f3\u306b\u306f\u5165\u3063\u3066\u3044\u306a\u3044\u306e\u3067\u3001\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u3068 changelog \u3067\u78ba\u8a8d\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\ncurl -sS https://nodejs.org/en/blog/vulnerability/october-2026-security-releases \\\n  | grep -o \"ca-cert (eMudhra Intermediate CA Compromise)\"\n\ncurl -sS https://raw.githubusercontent.com/nodejs/node/v22.23.4/doc/changelogs/CHANGELOG_V22.md \\\n  | grep -i \"root certificates\"\n```\n\n### \u7d50\u679c\n\n- \u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u306b **`ca-cert (eMudhra Intermediate CA Compromise)`** \u306e\u8a18\u8f09\u3042\u308a\u3002\n- \u30d0\u30fc\u30b8\u30e7\u30f3 **22.23.4 / 24.22.1 / 26.12.1** \u3092\u78ba\u8a8d\u3002\n- v22.23.4 \u306e changelog \u306b `crypto: update root certificates to NSS 3.131.1`\uff08PR #66877\uff09\u3002\n\nNode \u3092\u4f7f\u3046\u74b0\u5883\u3067\u306f\u3001\u3053\u306e 3 \u30d0\u30fc\u30b8\u30e7\u30f3\u4ee5\u4e0a\uff0b**Electron \u306a\u3069\u540c\u68b1\u30e9\u30f3\u30bf\u30a4\u30e0\u3082\u518d\u30d3\u30eb\u30c9**\u304c\u5fc5\u9808\u3002\n\n---\n\n## 8. Python / pip / certifi \u3092\u78ba\u8a8d\u3059\u308b\n\n### \u3084\u3063\u305f\u3053\u3068\n\n\u30b7\u30b9\u30c6\u30e0\u306b pip \u306f\u5165\u3063\u3066\u3044\u306a\u3044\u304c\u3001`certifi` \u306f dist-packages \u306b\u3042\u3063\u305f\u3002wheel \u306e\u4e2d\u8eab\u3082\u76f4\u63a5\u898b\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\npython3 -c \"import certifi; print(certifi.__version__, certifi.where())\"\n```\n\nwheel \u3092\u5c55\u958b\u3057\u3066 `cacert.pem` \u3092\u898b\u308b\u3002\n\n```bash\ncurl -sSLO https://files.pythonhosted.org/.../certifi-2026.10.19-py3-none-any.whl\ncurl -sSLO https://files.pythonhosted.org/.../pip-26.2.2-py3-none-any.whl\n\npython3 - <<'EOF'\nimport zipfile\nfor w in [\"certifi-2026.10.19-py3-none-any.whl\", \"pip-26.2.2-py3-none-any.whl\"]:\n    with zipfile.ZipFile(w) as z:\n        for n in z.namelist():\n            if n.endswith(\"cacert.pem\"):\n                d = z.read(n).decode()\n                print(w, n, \"certs:\", d.count(\"BEGIN CERTIFICATE\"))\n                print(\"  emSign ECC Root CA - G3:\", \"emSign ECC Root CA - G3\" in d)\nEOF\n```\n\n### \u7d50\u679c\n\n| \u30d0\u30f3\u30c9\u30eb | \u8a3c\u660e\u66f8\u6570 | emSign G3 |\n|---|---|---|\n| \u624b\u5143\u306e certifi 2026.01.04 | 136 | **\u542b\u3080** |\n| certifi 2026.10.19 \u306e wheel | 120 | \u542b\u307e\u306a\u3044 |\n| pip 26.2.2 \u306e vendored certifi | 120 | \u542b\u307e\u306a\u3044 |\n\n\u305f\u3060\u3057\u3001\u624b\u5143\u306e certifi \u306f Debian/Ubuntu \u30d1\u30c3\u30c1\u3067 `where()` \u304c `/etc/ssl/certs/ca-certificates.crt` \u3092\u8fd4\u3059\u305f\u3081\u3001**\u5b9f\u8cea\u306f\u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2\uff08\u30d1\u30c3\u30c1\u6e08\u307f\uff09\u3092\u4f7f\u3063\u3066\u3044\u308b**\u3002\u5b89\u5fc3\u3002\n\npip 26.2.2 \u304c certifi 2026.10.19 \u3092\u540c\u68b1\u3057\u3066\u3044\u308b\u306e\u3082\u78ba\u8a8d\u3067\u304d\u305f\u3002venv \u3092\u65b0\u898f\u4f5c\u6210\u3059\u308b\u3068\u304d\u306f\u3001\u3053\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u4ee5\u4e0a\u306b\u3057\u3066\u304a\u304d\u305f\u3044\u3002\n\n`uv` \u306f\u672a\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3060\u3063\u305f\u306e\u3067\u30010.13.4 \u3068\u3044\u3046\u8a18\u8f09\u306f\u5b9f\u6a5f\u78ba\u8a8d\u3067\u304d\u3066\u3044\u306a\u3044\u3002\u3053\u3053\u306f\u30b5\u30a4\u30c8\u306e\u8a18\u8f09\u3092\u305d\u306e\u307e\u307e\u53c2\u7167\u3002\n\n---\n\n## 9. \u552f\u4e00\u306e\u6b8b\u5b58\u30ea\u30b9\u30af\uff1aNix \u540c\u68b1 CA \u30d0\u30f3\u30c9\u30eb\n\n### \u3084\u3063\u305f\u3053\u3068\n\nNix \u306f `NIX_SSL_CERT_FILE` \u3092\u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2\u306b\u5411\u3051\u308b\u306e\u3067\u901a\u5e38\u306f\u554f\u984c\u306a\u3044\u3002\u3060\u304c\u3001**Nix \u81ea\u8eab\u304c\u540c\u68b1\u3057\u3066\u3044\u308b `nss-cacert` \u304c\u53e4\u3044**\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u5b9f\u969b\u306b\u691c\u8a3c\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\nNIX_BUNDLE=\"/...-nss-cacert-3.117/etc/ssl/certs/ca-bundle.crt\"\n\nfor f in *.pem; do\n  printf '%-45s ' \"${f%.pem}\"\n  openssl verify -CAfile \"$NIX_BUNDLE\" -untrusted \"$f\" \"$f\" >/dev/null 2>&1 \\\n    && echo \"TRUSTED (bad)\" || echo \"rejected\"\ndone\n```\n\n### \u7d50\u679c\n\n**emSign \u30eb\u30fc\u30c8\u306b\u9023\u9396\u3059\u308b 6 \u30c1\u30a7\u30fc\u30f3\u304c `TRUSTED (bad)`**\u3002AAA \u9023\u9396\u306e 6 \u672c\u306f rejected\u3002\n\n\u3064\u307e\u308a Nix \u306e\u30d0\u30f3\u30c9\u30eb\uff08nss-cacert **3.117**\uff09\u306b\u306f\u3001\u307e\u3060 `emSign ECC Root CA - G3` \u304c\u5165\u3063\u3066\u3044\u308b\u3002\u4fee\u6b63\u7248\u306f NSS **3.131.1**\u3002\n\n`NIX_SSL_CERT_FILE` \u304c\u30b7\u30b9\u30c6\u30e0\u30d0\u30f3\u30c9\u30eb\u3092\u6307\u3057\u3066\u3044\u308b\u9593\u306f OpenSSL \u7cfb\u30c4\u30fc\u30eb\u306f\u5b89\u5168\u3060\u304c\u3001**\u3053\u306e\u74b0\u5883\u5909\u6570\u3092\u7121\u8996\u3059\u308b\u30c4\u30fc\u30eb**\uff08rustls / webpki-roots \u7cfb\u3001CA \u3092\u9759\u7684\u30ea\u30f3\u30af\u3057\u305f\u30d0\u30a4\u30ca\u30ea\u306a\u3069\uff09\u306f\u5f71\u97ff\u3092\u53d7\u3051\u5f97\u308b\u3002\n\n`nix` \u81ea\u4f53\u3082 `nix profile upgrade` \u3084 flake \u306e\u66f4\u65b0\u3067 `nss-cacert` \u3092\u65b0\u3057\u304f\u3067\u304d\u308b\u306e\u3067\u3001\u65e9\u3081\u306b\u4e0a\u3052\u3066\u304a\u304d\u305f\u3044\u3002\n\n---\n\n## 10. \u300c\u8a3c\u660e\u66f8\u66f4\u65b0\u306e\u8a2d\u5b9a\u300d\u306f\u3042\u308b\u306e\u304b\n\n### \u3084\u3063\u305f\u3053\u3068\n\nACME \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3084 TLS \u30b5\u30fc\u30d0\u306e\u6709\u7121\u3092\u78ba\u8a8d\u3057\u305f\u3002\n\n### \u78ba\u8a8d\u65b9\u6cd5\n\n```bash\nfor c in certbot acme.sh lego caddy nginx apache2; do command -v \"$c\"; done\nls -d /etc/letsencrypt ~/.acme.sh /var/lib/caddy /etc/caddy /etc/nginx 2>/dev/null\nsystemctl list-timers --all --no-pager\ncrontab -l 2>/dev/null\n```\n\n### \u7d50\u679c\n\n- certbot / acme.sh / lego / caddy / nginx / apache2 \u306f**\u3069\u308c\u3082\u306a\u3057**\u3002\n- `/etc/letsencrypt` \u306a\u3069\u3082\u306a\u3057\u3002\n- CA \u66f4\u65b0\u4ee5\u5916\u306e\u8a3c\u660e\u66f8\u66f4\u65b0\u30bf\u30a4\u30de\u30fc\u30fbcron \u3082\u306a\u3057\u3002\n\n\u3053\u306e\u30db\u30b9\u30c8\u306f\u300cTLS \u8a3c\u660e\u66f8\u3092\u767a\u884c\u30fb\u66f4\u65b0\u3059\u308b\u30b5\u30fc\u30d0\u300d\u3067\u306f\u306a\u3044\u3002**CA \u30b9\u30c8\u30a2\u306e\u66f4\u65b0\u306f `unattended-upgrades` \u304c\u62c5\u5f53**\u3057\u3066\u3044\u3066\u3001\u305d\u3061\u3089\u306f\u6709\u52b9\u3002\u3082\u3057\u5225\u30db\u30b9\u30c8\u306e\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u66f4\u65b0\u306e\u8a71\u306a\u3089\u3001\u305d\u306e\u30db\u30b9\u30c8\u3092\u5225\u9014\u898b\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002\n\n---\n\n## \u307e\u3068\u3081\n\n| \u5bfe\u8c61 | \u72b6\u614b | \u6839\u62e0 |\n|---|---|---|\n| \u7f72\u540d\u8a3c\u660e\uff08proof.zip\uff09 | 8/8 \u691c\u8a3c OK | `openssl dgst -verify` |\n| \u5f31\u3044\u9375\u306e\u4e3b\u5f35 | \u4e8b\u5b9f | d \u3092\u5fa9\u5143\uff081 \u672c\u306f d=4\uff09 |\n| Ubuntu ca-certificates | \u30d1\u30c3\u30c1\u6e08\u307f | `20260816ubuntu0.26.04.1` |\n| \u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2 | 12/12 \u62d2\u5426 | `openssl verify` + `curl` |\n| Go\uff08\u624b\u5143\uff09 | **\u672a\u30d1\u30c3\u30c1** | 1.26.8 / 1.27.1 |\n| Go 1.27.3 \u306e\u30d6\u30ed\u30c3\u30af\u30ea\u30b9\u30c8 | 8 \u4ef6\u4e00\u81f4 | `distrustedSPKIHashes` |\n| Node | \u672a\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff08\u8a18\u8f09\u306f\u78ba\u8a8d\uff09 | 22.23.4 / 24.22.1 / 26.12.1 |\n| Python / certifi | \u5b9f\u8cea\u5b89\u5168 | \u30b7\u30b9\u30c6\u30e0\u30b9\u30c8\u30a2\u53c2\u7167 |\n| pip 26.2.2 | \u4fee\u6b63\u6e08\u307f certifi \u540c\u68b1 | wheel \u306e\u4e2d\u8eab\u3092\u78ba\u8a8d |\n| Nix \u540c\u68b1 CA | **\u53e4\u3044\uff08\u8981\u66f4\u65b0\uff09** | nss-cacert 3.117 |\n| TLS \u8a3c\u660e\u66f8\u306e\u81ea\u52d5\u66f4\u65b0 | \u5bfe\u8c61\u5916 | ACME \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306a\u3057 |\n\n### \u3084\u3089\u306a\u304f\u3066\u3088\u304b\u3063\u305f\u3053\u3068\n\n- \u30b5\u30a4\u30c8\u306b\u66f8\u304b\u308c\u3066\u3044\u308b root \u5411\u3051 `sed` \u30ef\u30fc\u30af\u30a2\u30e9\u30a6\u30f3\u30c9\n- Windows \u306e PowerShell \u30b9\u30af\u30ea\u30d7\u30c8\n- macOS \u306e `cert.pem` \u66f8\u304d\u63db\u3048\n\n\u3059\u3067\u306b\u30d1\u30c3\u30c1\u6e08\u307f\u306e\u74b0\u5883\u3067\u306f\u4e0d\u8981\u3060\u3057\u3001**Web \u30b5\u30a4\u30c8\u306e\u6307\u793a\u3092\u305d\u306e\u307e\u307e\u7ba1\u7406\u8005\u6a29\u9650\u3067\u5b9f\u884c\u3059\u308b\u306e\u306f\u5371\u967a**\u3002\u307e\u305a `openssl verify` \u3068 `curl` \u3067\u73fe\u72b6\u3092\u78ba\u8a8d\u3059\u308b\u306e\u304c\u6b63\u89e3\u3060\u3063\u305f\u3002\n\n### \u6b21\u306b\u3084\u308b\u3053\u3068\n\n1. Go \u3092 **1.26.10 / 1.27.3 \u4ee5\u964d**\u306b\u66f4\u65b0\u3057\u3001\u914d\u5e03\u30d0\u30a4\u30ca\u30ea\u3092\u518d\u30d3\u30eb\u30c9\u3002\n2. Nix \u306e `nss-cacert` \u3092\u66f4\u65b0\uff083.131.1 \u4ee5\u964d\uff09\u3002\n3. Node / Electron / \u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u4f7f\u3046\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306f\u3001\u30d1\u30c3\u30c1\u7248\u3067\u518d\u30d3\u30eb\u30c9\u3002\n4. \u65b0\u3057\u3044 venv \u3092\u4f5c\u308b\u3068\u304d\u306f pip 26.2.2 \u4ee5\u4e0a\u30fbcertifi 2026.10.19 \u4ee5\u4e0a\u3002\n5. \u30d6\u30e9\u30a6\u30b6\u306f\u666e\u6bb5\u4f7f\u3046\u3082\u306e\u3067\u30c1\u30a7\u30c3\u30ab\u30fc\u3092\u5b9f\u884c\u3057\u3066\u78ba\u8a8d\u3002\n\n\u5931\u52b9\u3092\u898b\u306a\u3044\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u591a\u3044\u4ee5\u4e0a\u3001**\u300c\u5931\u52b9\u3057\u305f\u304b\u3089\u5b89\u5168\u300d\u3067\u306f\u306a\u304f\u300c\u4fe1\u983c\u30b9\u30c8\u30a2\u304b\u3089\u6d88\u3048\u305f\u304b\u300d**\u3067\u5224\u65ad\u3059\u308b\u306e\u304c\u5927\u4e8b\u3060\u3068\u518d\u78ba\u8a8d\u3057\u305f\u4e00\u4ef6\u3067\u3057\u305f\u3002\n", "url": "https://gist.github.com/podhmo/488f4b4f62ad7aa7bbccf6b2fe238ed7"}, {"timestamp": "2026-10-22T10:43:53Z", "date_only": false, "value": "2026-10-22T10:43:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12212-1", "record": "OPENSUSE-SU-2026:12212-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T10:43:53Z", "date_only": false, "value": "2026-10-22T10:43:53Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12212-1", "record": "OPENSUSE-SU-2026:12212-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T10:44:04Z", "date_only": false, "value": "2026-10-22T10:44:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12220-1", "record": "OPENSUSE-SU-2026:12220-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T10:44:04Z", "date_only": false, "value": "2026-10-22T10:44:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12220-1", "record": "OPENSUSE-SU-2026:12220-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T11:10:03Z", "date_only": false, "value": "2026-10-22T11:10:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T11:10:03Z", "date_only": false, "value": "2026-10-22T11:10:03+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T11:10:03Z", "date_only": false, "value": "2026-10-22T11:10:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T11:10:05Z", "date_only": false, "value": "2026-10-22T11:10:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T11:46:54Z", "date_only": false, "value": "2026-10-22T11:46:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T11:46:54Z", "date_only": false, "value": "2026-10-22T11:46:54+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T11:46:54Z", "date_only": false, "value": "2026-10-22T11:46:54+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T12:03:45Z", "date_only": false, "value": "2026-10-22T12:03:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T12:03:45Z", "date_only": false, "value": "2026-10-22T12:03:45+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T12:03:45Z", "date_only": false, "value": "2026-10-22T12:03:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T13:40:36Z", "date_only": false, "value": "2026-10-22T13:40:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/a-zw/91f3ccfde83cb4687cf55c3e43438aca", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "fc162de4-30a1-47a9-9801-de14882861d7", "content": "# eMudhra / emSign CA certificate security incident (Oct 2026)\n\nTerse incident summary and remediation.\nCovers browsers, Python, Go, Node, Java, Docker, Ubuntu.\n\n## TL;DR\n\nThe private keys of eight eMudhra (emSign) intermediate CAs were compromised.\nThey were not stolen; they were generated in Apr 2025 with only single-byte P-384\nrandomness (`d` = 4, 56, 66, 115, 155, 156, 230, 237), so anyone can recover them\nfrom the public certificates in milliseconds.\nSix can mint TLS certs for any hostname, two are code signing.\nClients that still trust the chains accept forged certificates (MITM risk).\n\nBrowsers are protected.\nMost non-browser software is not, unless its trust store is updated to remove the\nroots or block the keys.\n**Update every CA bundle and rebuild every container image now.**\n\n## Incident facts\n\n- Apr 30, 2025: eight intermediates created in a ceremony; a bug in the key\n  generation script produces a second, weak key set on the HSM, and the wrong keys\n  end up in the CSRs.\n- May 2025: all eight are cross-signed by Sectigo's legacy `AAA Certificate Services`\n  root.\n- Oct 17, 2026: researcher \"Wayne\" reports it; Chrome and Firefox block the keys\n  within hours.\n- No TLS cert chaining to the six was ever logged to Certificate Transparency (CT),\n  so CT-enforcing browsers were protected throughout an ~17 month exposure window.\n\nRoots hosting the affected chains:\n\n| Root                         | Notes                                  |\n| ---------------------------- | -------------------------------------- |\n| emSign ECC Root CA - G3      | removed from Mozilla NSS 3.131.1       |\n| emSign Root TLS CA - G3      | direct issuer                          |\n| emSign Root CS CA - G3       | code signing, trusted by Windows       |\n| AAA Certificate Services     | Sectigo cross-signer (legacy Comodo)   |\n\n**Key nuance:** removing the emSign roots does not protect systems that still trust\n`AAA Certificate Services` for TLS (Debian/Ubuntu-based, Java `cacerts`).\nThere the cross-signed copies still verify.\nThose systems need a key-based (SPKI) block or revocation checking, not just a root\nremoval.\n\n## Browsers\n\nUsers just need to keep browsers and OSes updated; no manual action, no restart.\n\n| Browser | Protection | Ships with the browser? |\n| ------- | ---------- | ----------------------- |\n| Chrome  | CRLSet block by SPKI hash (Oct 17) + CT + root store v43 coming | yes, auto-pushed |\n| Firefox | OneCRL (Oct 17) + NSS 3.131.1 root removal + CT | yes, auto-pushed |\n| Safari  | Apple block (Oct 19) | macOS/iOS update |\n| Edge    | Microsoft block (Oct 20) via Windows Update | yes |\n| Android | block via Google Play Services (Oct 19) | yes |\n\nChrome and Firefox blocks match the *public key*, so they catch the Sectigo\ncross-signed copies too, and neither needed a browser restart.\nChrome/Firefox dropped `AAA Certificate Services` for websites back in Apr 2025.\n\nCaveats: Windows CryptoAPI only rejects the chains when revocation checking is\nswitched on (same for some older non-browser clients).\nOld Apple root lists (pre-iOS 26 / macOS 26) still carry `AAA Certificate Services`,\nso those chains matter for non-browser tools on older Apple OS versions.\n\n## Python\n\n| Package  | Fixed in   | Why                                    |\n| -------- | ---------- | -------------------------------------- |\n| certifi  | 2026.10.19 | removes emSign roots (GHSA-6q48-6c7w-9gw2) |\n| pip      | 26.2.2     | uses vendored certifi, cannot disable  |\n| uv       | 0.13.4     | with `UV_SYSTEM_CERTS=true`            |\n| sigstore | 4.5.1      |                                        |\n| pixi     | 0.82.1     |                                        |\n\n`pip` is the critical one.\nIt always loads its vendored certifi on top of the system store with no way to turn\nthat off, so OS-level distrust does **not** protect pip.\nOnly upgrading pip works.\n\nBootstrap a secure pip first (URL + SHA-256 verified), then upgrade everything else\nin each venv/container:\n\n```bash\npython -m pip install \"pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70\"\npython -m pip install --upgrade certifi uv\nUV_SYSTEM_CERTS=true uv self update\n```\n\nmacOS python.org installers bundle certifi, so update it there too.\nUntil CPython security releases fix the bundled pip (GH-159910), upgrade pip after\nevery fresh venv.\n\n## Go\n\n- CVE-2026-111943 (go/go#82345).\n- `crypto/x509` now refuses chains containing the eight compromised keys\n  (SHA-256 SPKI blocklist), on all paths including Darwin/Windows system verify.\n- Fixed: **Go 1.27.3**, **Go 1.26.10**. Older, unsupported releases get nothing.\n- Rebuild binaries and images with the new toolchain; old build artifacts stay\n  vulnerable.\n\n## Node.js\n\n- PR nodejs/node#66871: compiled-in SPKI blocklist (byte-identical to Go) + root\n  store update to NSS 3.131.1.\n- Fixed: **v26.12.1**, **v24.22.1**, **v22.23.4**.\n- Sessions resumed from before the upgrade are not re-verified until they time out,\n  so restart long-lived processes.\n\n## Java\n\nJava is uniquely exposed: it uses a static `cacerts` per JDK, has no CT enforcement,\nand revocation (OCSP/CRL) is off by default\n(`com.sun.net.ssl.checkRevocation=false`).\nOutbound HTTPS from HttpClient, Spring, OkHttp, Netty etc. with default settings\naccepts forged chains.\nTest any JDK with Mark Struberg's `CheckCompromisedCa.java` against the 12\n`*-emudhra.we-have-a-problem.com` test hosts.\n\n**The trap:** `cacerts` also contains `AAA Certificate Services` (`comodoaaaca`).\nSo *deleting the emSign roots is not enough* \u2014 the six `*-aaa-\u2026` cross-signed chains\nstill verify 100%.\nDeleting `comodoaaaca` too blocks them but breaks legitimate legacy Sectigo chains.\n\n**Proper fix:** append the 16 certificate SHA-256 hashes (8 keys x 2 issuers) to\n`$JAVA_HOME/lib/security/blocked.certs`.\nThe JVM checks this list during every chain validation (\"Untrusted certificate\")\nand it causes no collateral damage.\nThe full hash list is in Laforge's post (link below).\nDo it for every JDK (SDKMAN: loop over `~/.sdkman/candidates/java/*/`), then re-run\n`CheckCompromisedCa.java` to confirm all 12 connections are rejected.\n\n- GraalVM native images embed the trust config at build time \u2014 patch the host JDK,\n  then rebuild the binary.\n- Container images freeze `cacerts`/`blocked.certs` at build time \u2014 add a `RUN` step\n  appending the 16 hashes, or wait for an updated base image (Temurin, Corretto,\n  Zulu, Temurin/Chainguard).\n\n## Docker / containers\n\nRebuild images from updated base images; a patched host does not fix last month's\nimage.\n\n- Official Python images for 3.11/3.12 still ship a pip that trusts the chain\n  (pip < 26.2.2); upgrade pip inside the image or use newer tags.\n- Node/golang official images are Debian-based and carry `AAA Certificate Services`;\n  the Node runtime SPKI block protects the process, but image tools (curl, wget,\n  git) still need updated `ca-certificates`.\n\nVerify clients against the disclosure test hosts (curl fails = protected):\n\n```bash\ncurl -v https://dv-g3b-emudhra.we-have-a-problem.com/\ncurl -v https://dv-g3b-aaa-emudhra.we-have-a-problem.com/\n```\n\n## Ubuntu\n\n`ca-certificates` removes `emSign Root TLS CA - G3` and `Comodo AAA Certificate\nServices` (USN-8944-1/2).\n\n| Release        | Fixed version                        |\n| -------------- | ------------------------------------ |\n| 14.04/16.04/18.04/20.04 | ESM via Ubuntu Pro (see USN) |\n| Jammy 22.04    | 20260816ubuntu0.22.04.1              |\n| Noble 24.04    | 20260816ubuntu0.24.04.1              |\n| Resolute 26.04 | 20260816ubuntu0.26.04.1              |\n| Stonking 26.10 | 20260816ubuntu0.26.10.1              |\n\n```bash\nsudo apt update && sudo apt upgrade\n# or targeted:\nsudo apt update && sudo apt install --only-upgrade ca-certificates\n```\n\nDesktop browsers are snaps and ignore the system store; refresh snaps if updates are\noff.\n\n## Other bundles\n\n| Component                | Fixed in                                   |\n| ------------------------ | ------------------------------------------ |\n| Debian ca-certificates   | 20250419~deb12u2 / +deb13u1 / 20260816+nmu1|\n| Alpine / Fedora / Arch   | 20261020-r0 / 2026.2.92_v9.0.319 / 3.131.1-1 |\n| Chainguard / NSS / curl  | 20260909-r3 / 3.131.1 / 2026-10-20         |\n| Rust rustls-webpki       | 0.103.16; webpki-roots 1.0.10              |\n| Electron                 | 44.9.1, 43.8.1, 42.11.16                   |\n| PHP composer/ca-bundle   | 1.4.16, 1.6.0                              |\n| Elixir castore / Perl Mozilla::CA | 1.0.22 / 20261020                 |\n\n**Hidden trust stores:** some libraries ship their own frozen PEM instead of a\nbundle package (Python HTTP clients as fallback, Ruby gems with 11-year-old lists).\nScan for the affected root fingerprints\n(SHA-256: AAA Certificate Services `D7A7A0FB\u20269EF4`, emSign ECC Root `86A1ECBA\u2026BE6B`,\nemSign Root TLS `7DD78D5F\u20266ED8D`, emSign Root CS `F2EDAAFF\u202634A5`):\n\n```bash\nAFFECTED='D7A7A0FB5D7E2731D771E9484EBCDEF71D5F0C3E0A2948782BC83EE0EA699EF4\n86A1ECBA089C4A8D3BBE2734C612BA341D813E043CF9E8A862CD5C57A36BBE6B\n7DD78D5F4F13459A83DFF9ABBBA62EDBAF6F2D102BF257FD712F4D9F2746ED8D\nF2EDAAFF3D9B701FB4D14C9F285F8C0BAD90FC3BCC1FA07D47F4718EDABA34A5'\nawk '/BEGIN CERT/{n++} n{print > (\"c\" n \".pem\")}' bundle.pem\nfor c in c*.pem; do fp=$(openssl x509 -in \"$c\" -noout -fingerprint -sha256 | cut -d= -f2 | tr -d ':'); grep -qx \"$fp\" <<<\"$AFFECTED\" && echo \"AFFECTED $c\"; done\n```\n\n## Enterprise notes\n\nNot a product code vulnerability, but every dev toolchain and build pipeline is\naffected:\n\n1. Update pip/certifi, rebuild venvs, containers, CI runners.\n2. This WSL's system Python certifi is still 2023.11.17 (vulnerable) \u2014 bootstrap pip.\n3. Java needs the `blocked.certs` step per JDK until vendors ship patched builds.\n4. IoT/frozen-firmware devices cannot be fixed; they stay exposed (chains expire\n   ~Jul 2039). Inventory them.\n5. Old Ubuntu needs Ubuntu Pro/ESM for the fix. Track via SCA\n   (Endor Labs tags bundled stores under CVE-2026-111943).\n\n## Sources\n\n- Disclosure site (signatures, chains, test hosts): [emudhra.we-have-a-problem.com](https://emudhra.we-have-a-problem.com/)\n- Mozilla disclosure + Chrome Root Program response: [dev-security-policy thread](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ)\n- Incident tracker / eMudhra root-cause account: [Mozilla bug 2083449](https://bugzilla.mozilla.org/show_bug.cgi?id=2083449)\n- Python packaging advisory: [discuss.python.org thread](https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576/)\n- certifi advisory: [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2)\n- Go: [CVE-2026-111943 / go issue 82345](https://go.dev/issue/82345)\n- Node.js: [PR #66871](https://github.com/nodejs/node/pull/66871)\n- Java/JVM: [\u201cWhy Your JVM Is Vulnerable\u201d (G. Laforge)](https://glaforge.dev/posts/2026/10/21/the-emudhra-ca-compromise-why-your-jvm-is-vulnerable-and-how-to-fix-it/)\n- Ubuntu: [\u201ceMudhra CA compromise fixes available\u201d](https://ubuntu.com/blog/emudhra-ca-compromise-fixes-available) / [USN-8944-1](https://ubuntu.com/security/notices/USN-8944-1)\n- Red Hat: [RHSB-2026-012](https://access.redhat.com/security/vulnerabilities/RHSB-2026-012)\n- Scott Helme: [\u201cEight Bits of Trust\u201d](https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/)\n- Endor Labs: [trust-store analysis](https://www.endorlabs.com/learn/emudhra-intermediate-ca-compromise-the-trust-stores-you-patched-and-the-ones-you-didnt-know-you-had)\n- Recap: [The Hacker News](https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html)\n", "url": "https://gist.github.com/a-zw/91f3ccfde83cb4687cf55c3e43438aca"}, {"timestamp": "2026-10-22T14:35:04Z", "date_only": false, "value": "2026-10-22T14:35:04Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4432", "record": "OESA-2026-4432", "field": "published"}, {"timestamp": "2026-10-22T14:35:04Z", "date_only": false, "value": "2026-10-22T14:35:04Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4432", "record": "OESA-2026-4432", "field": "modified"}, {"timestamp": "2026-10-22T14:35:05Z", "date_only": false, "value": "2026-10-22T14:35:05Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4433", "record": "OESA-2026-4433", "field": "published"}, {"timestamp": "2026-10-22T14:35:05Z", "date_only": false, "value": "2026-10-22T14:35:05Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4433", "record": "OESA-2026-4433", "field": "modified"}, {"timestamp": "2026-10-22T14:35:06Z", "date_only": false, "value": "2026-10-22T14:35:06Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4435", "record": "OESA-2026-4435", "field": "published"}, {"timestamp": "2026-10-22T14:35:06Z", "date_only": false, "value": "2026-10-22T14:35:06Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4435", "record": "OESA-2026-4435", "field": "modified"}, {"timestamp": "2026-10-22T14:58:20Z", "date_only": false, "value": "2026-10-22T14:58:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T14:58:20Z", "date_only": false, "value": "2026-10-22T14:58:20+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T14:58:20Z", "date_only": false, "value": "2026-10-22T14:58:20+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T15:09:55Z", "date_only": false, "value": "2026-10-22T15:09:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T15:09:55Z", "date_only": false, "value": "2026-10-22T15:09:55+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T15:09:55Z", "date_only": false, "value": "2026-10-22T15:09:55+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T15:35:26Z", "date_only": false, "value": "2026-10-22T15:35:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T15:35:26Z", "date_only": false, "value": "2026-10-22T15:35:26+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T15:35:26Z", "date_only": false, "value": "2026-10-22T15:35:26+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T15:42:21Z", "date_only": false, "value": "2026-10-22T15:42:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/moredatarequired/263a49b9fb776e67bffd1bded9cd81d0", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "7e181d7c-2f44-4a14-b87a-f8c4879633e0", "content": "#!/usr/bin/env python3\n\"\"\"Part of the emudhra-ca-remediation skill.\n\nFind Go binaries and report the toolchain each was built with. That covers\nyour own services and the third-party CLIs built in Go (terraform, helm,\nkubectl, gh, the docker CLI, cloud CLIs, providers). Go compiles\ncrypto/x509 into every binary, so one built before Go 1.26.10 / 1.27.3\nkeeps trusting the compromised eMudhra intermediates until its vendor\nships a rebuild, whatever the OS trust store says.\n\nNo Go toolchain is needed: the version is read from the build info that\nGo 1.18+ embeds in every binary. Older binaries carry no build info and\nare reported as VULNERABLE (built before 1.18).\n\n    go_binaries.py [DIR_OR_FILE ...]     # default: every directory on $PATH\n    go_binaries.py --json /usr/local/bin\n    go_binaries.py --root fs fs          # an image filesystem exported to ./fs\n\nWith --root, symlinks are resolved inside that directory, as they would be in\nthe image: an absolute link such as usr/local/bin/helm -> /opt/helm/helm is\nread from fs/opt/helm/helm, never from the host.\n\nA file named on the command line that is not a Go binary (often a version\nmanager's shim: asdf, tfenv, mise) is reported as REVIEW, since the real\nbinary was not read. So is an executable packed with UPX, whose contents\ncannot be read until it is unpacked (upx -d). A target that does not exist,\nor a file or directory that cannot be read, is an ERROR.\n\nExit status: 1 if any binary is VULNERABLE, else 2 on any ERROR, else 3 on any\nREVIEW, else 0. Only 0 is a pass.\n\"\"\"\n\nfrom collections import deque\n\nimport json\nimport mmap\nimport os\nimport re\nimport sys\n\nMAGIC = b\"\\xff Go buildinf:\"\nFIXED = {(1, 26): (1, 26, 10), (1, 27): (1, 27, 3)}\nMIN_SIZE = 512 * 1024\n\n\ndef uvarint(buf, pos):\n    value = shift = 0\n    while pos < len(buf):\n        b = buf[pos]\n        pos += 1\n        value |= (b & 0x7F) << shift\n        if not b & 0x80:\n            return value, pos\n        shift += 7\n    return None, pos\n\n\nclass Packed(Exception):\n    pass\n\n\ndef go_version(path):\n    \"\"\"The 'go1.x.y' a binary was built with, '' for a Go binary whose\n    version cannot be read (pre-1.18, or an unexpected header), or None when\n    it is not a Go binary. Raises OSError if unreadable, Packed if UPX-packed.\"\"\"\n    if os.path.getsize(path) < MIN_SIZE:\n        return None\n    with open(path, \"rb\") as f:\n        head = f.read(4)\n        if head not in (b\"\\x7fELF\", b\"MZ\\x90\\x00\") and head[:2] != b\"MZ\" and \\\n                head not in (b\"\\xcf\\xfa\\xed\\xfe\", b\"\\xce\\xfa\\xed\\xfe\", b\"\\xca\\xfe\\xba\\xbe\"):\n            return None\n        # The whole file, mapped: Terraform providers run to 800 MB and more.\n        with mmap.mmap(f.fileno(), 0, access=mmap.ACCESS_READ) as data:\n            return _go_version(data)\n\n\ndef _go_version(data):\n    i = data.find(MAGIC)\n    if i < 0:\n        if data.find(b\"runtime.goexit\") >= 0 or data.find(b\"Go build ID:\") >= 0:\n            return \"\"\n        if b\"UPX!\" in data[:4096]:\n            raise Packed()\n        return None\n    flags = data[i + 15] if i + 15 < len(data) else 0\n    if flags & 0x2:  # Go 1.18+: inline varint-prefixed strings after a 32-byte header\n        n, pos = uvarint(data, i + 32)\n        if n:\n            return data[pos:pos + n].decode(\"ascii\", \"replace\")\n    # A pre-1.18 header (pointer-based) or something unexpected. Searching the\n    # binary for a \"go1.x\" string could find any text, so report it unknown:\n    # every pre-1.18 toolchain is affected.\n    return \"\"\n\n\ndef verdict(version):\n    m = re.match(r\"go(\\d+)\\.(\\d+)(?:\\.(\\d+))?\", version or \"\")\n    if not m:\n        return \"VULNERABLE\", (\"no readable Go version (older than Go 1.18, or stripped by the build): \"\n                              \"treat it as affected until its vendor confirms the toolchain\")\n    v = tuple(int(x or 0) for x in m.groups())\n    line = v[:2]\n    if line in FIXED:\n        return (\"FIXED\", \"\") if v >= FIXED[line] else (\"VULNERABLE\", \"needs >= go%d.%d.%d\" % FIXED[line])\n    if line < (1, 26):\n        return \"VULNERABLE\", \"Go %d.%d has no patched release; needs a build on 1.26.10+ or 1.27.3+\" % line\n    return \"REVIEW\", \"newer than the advisory; confirm it includes CVE-2026-111943\"\n\n\ndef realpath_in(root, path):\n    \"\"\"realpath() as seen from inside root: absolute links restart at root, and\n    '..' never climbs above it. None for a loop or a dangling link.\"\"\"\n    parts = deque(os.path.relpath(path, root).split(os.sep))\n    resolved = []\n    hops = 0\n    while parts:\n        c = parts.popleft()\n        if c in (\"\", \".\"):\n            continue\n        if c == \"..\":\n            if resolved:\n                resolved.pop()\n            continue\n        cand = os.path.join(root, *resolved, c)\n        if os.path.islink(cand):\n            hops += 1\n            if hops > 40:\n                return None\n            target = os.readlink(cand)\n            if target.startswith(\"/\"):\n                resolved = []\n            parts.extendleft(reversed(target.split(\"/\")))\n        else:\n            resolved.append(c)\n    real = os.path.join(root, *resolved)\n    return real if os.path.exists(real) else None\n\n\ndef walk(target, root, seen, errors):\n    \"\"\"Yield (shown path, file to read) for every regular file under target.\"\"\"\n    def resolve(p):\n        return realpath_in(root, p) if root else os.path.realpath(p)\n    if not os.path.isdir(target) or (root and os.path.islink(target)):\n        real = resolve(target)\n        if real and os.path.isfile(real):\n            yield target, real\n        return\n    def onerror(e):\n        errors.append(\"%s: %s\" % (getattr(e, \"filename\", None) or target, e))\n\n    for dirpath, dirnames, filenames in os.walk(target, onerror=onerror):\n        dirnames[:] = [d for d in dirnames if d not in (\".git\", \"node_modules\", \"proc\", \"sys\", \"dev\")]\n        for fn in filenames:\n            p = os.path.join(dirpath, fn)\n            real = resolve(p)\n            if not real or real in seen or not os.path.isfile(real):\n                continue\n            seen.add(real)\n            yield p, real\n\n\ndef main():\n    argv = sys.argv[1:]\n    as_json = \"--json\" in argv\n    root = None\n    if \"--root\" in argv:\n        i = argv.index(\"--root\")\n        if i + 1 >= len(argv) or not os.path.isdir(argv[i + 1]):\n            print(\"--root needs an existing directory\", file=sys.stderr)\n            return 2\n        root = os.path.abspath(argv[i + 1])\n        del argv[i:i + 2]\n    args = [a for a in argv if a != \"--json\"]\n    named = bool(args)\n    targets = args or [d for d in os.environ.get(\"PATH\", \"\").split(os.pathsep) if os.path.isdir(d)]\n    rows = []\n    missing = False\n    seen = set()\n    files = total = 0\n    for t in targets:\n        if not os.path.lexists(t):\n            print(\"ERROR      %s does not exist\" % t, file=sys.stderr)\n            missing = True\n            continue\n        found = 0\n        errors = []\n        for shown, real in walk(os.path.abspath(t) if root else t, root, seen, errors):\n            files += 1\n            try:\n                v = go_version(real)\n            except OSError as e:\n                rows.append({\"status\": \"ERROR\", \"path\": shown, \"go\": \"?\", \"detail\": \"could not be read: %s\" % e})\n                continue\n            except Packed:\n                rows.append({\"status\": \"REVIEW\", \"path\": shown, \"go\": \"?\",\n                             \"detail\": \"packed with UPX, so its build info cannot be read; unpack a copy (upx -d) and rerun\"})\n                continue\n            if v is None:\n                continue\n            found += 1\n            total += 1\n            status, note = verdict(v)\n            if real != os.path.abspath(shown):\n                note = (\"%s (reads %s)\" % (note, real)).strip()\n            rows.append({\"status\": status, \"path\": shown, \"go\": v or \"unknown\", \"detail\": note})\n        rows += [{\"status\": \"ERROR\", \"path\": e, \"go\": \"?\", \"detail\": \"directory could not be listed\"} for e in errors]\n        if named and not found:\n            rows.append({\"status\": \"REVIEW\", \"path\": t, \"go\": \"none\",\n                         \"detail\": \"no Go binary here; if this is a version-manager shim, run this on the binary it launches\"\n                         if not os.path.isdir(t) else \"no Go binaries under this directory\"})\n    if not total and not named:\n        # An empty result proves nothing about the hosts that matter: this\n        # PATH may not be the one the services run with.\n        rows.append({\"status\": \"REVIEW\", \"path\": \"$PATH\", \"go\": \"none\",\n                     \"detail\": \"no Go binaries on this PATH; name the directories the services and CLIs live in\"})\n    order = {\"VULNERABLE\": 0, \"ERROR\": 1, \"REVIEW\": 2, \"FIXED\": 3}\n    rows.sort(key=lambda r: (order[r[\"status\"]], r[\"path\"]))\n    if as_json:\n        json.dump(rows, sys.stdout, indent=2)\n        print()\n    else:\n        for r in rows:\n            print(\"%-10s %-10s %s %s\" % (r[\"status\"], r[\"go\"], r[\"path\"], r[\"detail\"]))\n        print(\"%d files read in %s; %d Go binaries, %d vulnerable, %d errors, %d to review\" % (\n            files, \", \".join(targets) or \"nothing\", sum(r[\"go\"] not in (\"none\", \"?\") for r in rows), sum(r[\"status\"] == \"VULNERABLE\" for r in rows),\n            sum(r[\"status\"] == \"ERROR\" for r in rows), sum(r[\"status\"] == \"REVIEW\" for r in rows)))\n    statuses = {r[\"status\"] for r in rows}\n    if \"VULNERABLE\" in statuses:\n        return 1\n    if missing or \"ERROR\" in statuses:\n        return 2\n    return 3 if \"REVIEW\" in statuses else 0\n\n\nif __name__ == \"__main__\":\n    sys.exit(main())\n\n\n# The eMudhra intermediate CA compromise (October 2026)\n\nSnapshot as of 2026-10-22. Re-check the advisory's patched-versions table before\nrelying on a \"pending\" entry: https://emudhra.we-have-a-problem.com/\n\n## What happened\n\neMudhra generated the private keys of eight intermediate CA certificates\nincorrectly, in April 2025. Each private key is an integer below 256 (the keys were\n4, 56, 66, 115, 155, 156, 230 and 237), so anyone can recover them from the public\ncertificates. Whoever holds one can issue a certificate for any hostname, and it\nchains to roots that most TLS clients trust.\n\n- 2026-10-17: a researcher signed a test message with each key and reported it to\n  the Apple, Google, Microsoft and Mozilla root programs. Firefox and Chrome block\n  the intermediates (OneCRL, CRLite, CRLSets).\n- 2026-10-18 and 19: eMudhra and Sectigo revoke the intermediates and the\n  cross-signs. Apple blocks them on the 19th, and downstream trust stores are\n  notified the same day.\n- 2026-10-20: Microsoft blocks them through Windows' automatic CTL updates. The\n  advisory is published.\n\nThere were no CT log entries for these intermediates, so CT-enforcing browsers\n(Chrome, Safari, Edge, and Firefox) could not have been attacked. **Most non-browser\nclients do not enforce CT or check revocation.** That covers package managers,\nserver-side HTTP clients, SDKs, CLIs, CI runners, and mobile apps that use a raw\nWebView. Nobody knows whether these keys were exploited against such clients during\nthe 18 months they were recoverable.\n\n## What an attacker can do with it\n\nAnyone who can intercept the network path can impersonate any HTTPS server to a\nclient that still trusts the intermediates. That covers public Wi-Fi, a compromised\nrouter or ISP, a cloud network neighbour, and DNS hijacking. Concretely:\n\n- Steal credentials sent over TLS: API keys, OAuth tokens, registry tokens,\n  database passwords sent to managed services, and webhook secrets.\n- Tamper with downloads. This matters most where integrity rests on TLS alone: pip\n  without `--require-hashes`, curl-pipe-sh installers, base image pulls by tag, and\n  binary downloads in CI. Lockfile hashes (npm `integrity`, `uv.lock`, Cargo,\n  Go's sumdb) still protect package *contents*, but they do not protect the auth\n  token sent with the request.\n- Code signing: two of the eight are code-signing CAs, so Authenticode signatures\n  from them could be forged on Windows hosts that have not received Microsoft's\n  block.\n\nServers that only *present* certificates are not affected. A server is affected\nwherever it acts as a TLS client: outbound API calls, webhooks it sends, database\nand queue connections to public endpoints, and mTLS that trusts public roots.\n\n## The certificates\n\nThere are eight intermediates, each issued twice: once under eMudhra's own root and\nonce as a Sectigo cross-sign, which makes 16 certificates.\n\n| Intermediate | Use | SPKI SHA-256 (same for both issuances) |\n|---|---|---|\n| EM DV TLS CA - G3B | TLS | `EBED6475C2C2D80FCB199F3FE8DD6E6B3CE60B77EB15D4E42C3DEC0C6F5B5105` |\n| EM OV TLS CA - G3B | TLS | `43BFFA19D6EF651451F6841E019931E96F6F2EAEFF28AB4B6F1CE4576DE2717B` |\n| EM EV TLS CA - G3B | TLS | `E0254C7FCDC265E2F0F8A428DABB75AB4AE039B4872D62F5EE57F0877D5A8A41` |\n| EM DV TLS CA - G3C | TLS | `49DD353DC2B919A3770645117D0E60C16115E7D1BC259EEFE734B00EA434FE5F` |\n| EM OV TLS CA - G3C | TLS | `63ECEFEE431D49523BC1136C4E72D0206A477086CAF606CD5CF025686C109CF8` |\n| EM EV TLS CA - G3C | TLS | `5C0660A2B164910D8FF589C18E14552E9E0EC237DCEFE2CB736D41A4811F81A0` |\n| EM OV CS CA - G3B | code signing | `EC4FFA1AD0AC88081314B7AAFFEF6A91F97CD57291BB5BA686C5415F5EB4F6B6` |\n| EM OV CS CA - G3C | code signing | `92C063D67E8F14DB71D288E11266FFDAF69CBF115F7BAB14F3BC2F68D25E0E30` |\n\nThe full list, with certificate fingerprints and PEMs, is at\nhttps://emudhra.we-have-a-problem.com/impacted-intermediates.json. Its SHA-256 is\n`F67B3ABE9B4879F4E91874ED041BECCD71257F1DB41C588C724CCF12AA90C59E`, the same value the\nadvisory's Windows script pins.\n\nThey reach trust through two roots, and those two roots are what bundle fixes\nremove:\n\n| Root | SHA-256 | Where it is trusted |\n|---|---|---|\n| **emSign ECC Root CA - G3** (cross-signs eMudhra's emSign Root TLS CA - G3) | `86A1ECBA089C4A8D3BBE2734C612BA341D813E043CF9E8A862CD5C57A36BBE6B` | Apple, Chrome, Microsoft, Mozilla, so every Mozilla-derived bundle (certifi, curl's bundle, distro ca-certificates, Node, webpki-roots) |\n| **AAA Certificate Services** (Sectigo, \"Comodo AAA Services root\") | `D7A7A0FB5D7E2731D771E9484EBCDEF71D5F0C3E0A2948782BC83EE0EA699EF4` | Apple and Microsoft. Mozilla and Chrome had already removed it, but older bundles, the **JDK `cacerts` (alias `comodoaaaca`)**, Android \u2264 13, and **the Debian and Ubuntu system stores** (`Comodo_AAA_Services_root`) still carry it |\n\nChecked on 2026-10-22: certifi 2026.07.22 trusts the six emSign-path test\nchains and none of the AAA ones, and certifi 2026.10.19 trusts none of the twelve.\nSo a bundle that follows Mozilla's TLS trust bits (certifi, Node's built-in roots,\nwebpki-roots) is exposed through the emSign root only. The Debian 12 system store\nalso trusts the AAA cross-signed chains, which UlisesGascon's reproducible check\nconfirms (https://gist.github.com/UlisesGascon/10ed0724930e5382b3ed48fa2b0d3e02).\nSo are JDKs and the Apple and Windows platform stores. Where AAA is trusted, removing\nthe emSign root is not enough: you need the fixed distro package, a key-based\n(SPKI) block, or revocation checking. That is why every probe tests all 12 chains.\n\nSide effect: removing emSign ECC Root CA - G3 also breaks legitimate sites with\neMudhra certificates, which are mostly Indian government, banking and\ne-signature services. If a client integration talks to one of those, expect TLS\nfailures after patching and tell the owner. Never re-add the root to work around\nit.\n\n## Test endpoints\n\nThere are twelve hosts, one for each of the 6 TLS intermediates by 2 issuers:\n`{dv,ov,ev}-{g3b,g3c}[-aaa]-emudhra.we-have-a-problem.com`. Each serves a valid leaf\nissued by the compromised intermediate. A client that completes the handshake is\nvulnerable. `https://emudhra.we-have-a-problem.com/chains.zip` holds the same\nchains for offline checks (SHA-256\n`8a2edc81b6c51e3ad27d45ca1e441ec84c961e2dee0fc547f2a02c0f74315f95` as of 2026-10-20).\nThe site logs the user-agent of every successful connection. That is harmless,\nbut don't point a client carrying secrets at it: the probes send no\ncredentials, and yours shouldn't either.\n\n## Known traps\n\n- **macOS** (reported 2026-10-21 by Anzal Abidi after testing all 12 chains, and\n  consistent with the advisory): Apple marked the emSign root for OCSP checking\n  instead of removing it. `ocsp-b.emsign.com`, which serves the G3B intermediates,\n  returns 503, so `Security.framework` soft-fails open and trusts the 3 G3B\n  chains. The advisory's `/etc/ssl/cert.pem` edit is not enough either, because\n  Apple's LibreSSL falls back to `TrustEvaluationAgent` for certificates it does\n  not find in the file. `OPENSSL_X509_TEA_DISABLE=1` was suggested for that, but\n  made no difference in a later test, and Apple's `/usr/bin/python3` ignores\n  `SSL_CERT_FILE` altogether. Follow `remediation.md`'s macOS section, and\n  **always probe all 12 chains**, with the shell's variables and without them.\n  Later, macOS 27.0.1's Security.framework refused all 12, G3B included, so the\n  soft-fail may be fixed there: probe rather than assume either way. Clients on\n  rustls-platform-verifier delegate to it, and those connections took about 50 s,\n  so run the probe with `TIMEOUT=90` on macOS.\n- **Managed runtimes lag**: a Vercel production function on Node 24.21.0\n  accepted 6 of the 12 chains while the repo named Node 24, and a Vercel build\n  ran Bun 1.3.14 although `packageManager` said 1.4.4. Probe from inside.\n- **Embedded runtimes**: CLIs built with Node SEA or `bun build --compile` carry\n  their own roots. One widely used deploy CLI embedded Node 24.14.1 in two\n  consecutive releases.\n- **pip** always loads its vendored certifi alongside the system store, so fixing\n  the OS does not fix pip below 26.2.2. `PIP_CERT` overrides this.\n- **Docker official `python:` images** still shipped an old pip on 2026-10-21:\n  `python:3.12-slim` had pip 25.0.1 with certifi 2024.08.30.\n- **`PIP_CERT` doesn't fix an old pip**: pip 25.0.1 pointed at a patched store still\n  accepted 12 of 12. **`NODE_USE_SYSTEM_CA=1` doesn't fix Node** either: Node\n  still accepted the emSign chains with it set on a fixed OS store, while\n  `--use-openssl-ca` refused all 12.\n- **Alpine's `apk upgrade ca-certificates`** exits 0 and does nothing on images\n  that ship only `ca-certificates-bundle` (the `node:*-alpine` and `oven/bun:*-alpine`\n  images): upgrade `ca-certificates-bundle`.\n- **A redeploy doesn't move a platform's runtime.** Fresh Vercel previews still ran\n  Node 24.21.0 on 2026-10-22.\n- **Long-running processes keep the roots they loaded.** A daemon started before\n  the fix (a runner's dockerd, a JVM, a worker pool) needs a restart.\n- **Go** compiles `crypto/x509` into every binary. Go on Linux reads the OS store,\n  but the SPKI block lives in the toolchain, so a binary is protected only after a\n  rebuild with Go 1.26.10 or 1.27.3, *and* the image needs a fixed OS store.\n- **Docker layer cache**: `RUN apt-get install ca-certificates` from last month is\n  cached. Rebuild with `--pull --no-cache`, or the \"fixed\" image is the old one.\n- **Digest-pinned base images** never change until someone bumps the digest.\n- **Android \u2264 13** gets no Play-system CA updates. Apps that use a raw WebView, where\n  CT is off by default, trust both roots until the user disables them by hand.\n- **Firefox for Android < 158.0.2** had a OneCRL sync bug (Bug 2084311).\n\n## Sources\n\n- Advisory and patched-versions table: https://emudhra.we-have-a-problem.com/ (source: https://github.com/galadran/we-have-a-problem.com)\n- Python guidance: https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576\n- Mozilla incident bug: https://bugzilla.mozilla.org/show_bug.cgi?id=2083449, and trust-store guidance: https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE\n- Go CVE-2026-111943: https://groups.google.com/g/golang-announce/c/66pojueaQek\n- OpenJDK CVE-2026-91403: https://openjdk.org/groups/vulnerability/advisories/2026-10-21\n- macOS and Java test results: https://x.com/AnzalAbidi/status/2112943256522850576\n- eMudhra's statement: https://www.bseindia.com/xml-data/corpfiling/AttachLive/6be0c423-b335-494b-86f3-54c561c3a5f9.pdf\n\n\n# Remediation by stack\n\nFor each stack: **where its trust decision comes from**, the **fixed version**, the\n**fix**, and **how to confirm it in the deployed artifact**. Fixed versions are from\nhttps://emudhra.we-have-a-problem.com/ as of 2026-10-22, and they are minimums:\nany later release on the same line is fine. Run `check_advisory.py`\nbefore relying on them. The live table wins wherever it differs from this file,\nespecially for anything marked pending here.\n\nPatch every trust source a process uses. A Python service on Debian can use three\nat once: the OS store through `ssl`, certifi through `requests`, and pip's vendored\ncertifi at build time.\n\n## OS trust stores (used by curl, wget, git, OpenSSL, Python `ssl`, Ruby, PHP, Go on Linux, .NET on Linux, distro JDKs)\n\n| Platform | Fixed package |\n|---|---|\n| Ubuntu `ca-certificates` | 20260816ubuntu0.22.04.1, 20260816ubuntu0.24.04.1, 20260816ubuntu0.26.04.1, 20260816ubuntu0.26.10.1 |\n| Debian `ca-certificates` | 20250419~deb12u2 (bookworm), 20250419+deb13u1 (trixie), 20260816+nmu1 (sid) |\n| Alpine `ca-certificates` | 20261020-r0 |\n| Fedora `ca-certificates` | 2026.2.92_v9.0.319 |\n| Arch `ca-certificates-mozilla` | 3.131.1-1 |\n| Gentoo | 20260816.3.125 |\n| Chainguard / Wolfi | 20260909-r3 |\n| FreeBSD | caroot 15.1-RELEASE-p6, 14.5-RELEASE-p3, 14.4-RELEASE-p12; ca_root_nss 1.131.1 |\n| NSS | 3.131.1 |\n| curl's `cacert.pem` | 2026-10-20 |\n| Homebrew `ca-certificates` | 2026-09-25_1 |\n| Bottlerocket | pending |\n| RHEL / Rocky / Alma / Amazon Linux | not listed. Apply the blocklist below, then check with `trust_store.py system` |\n| Windows | blocked through automatic CTL updates since 2026-10-20. For offline hosts, use the advisory's `Block-EmudhraCompromisedCA.ps1` |\n\nFix in a Dockerfile: install the package **in the final stage**, and rebuild without\ncache:\n\n```dockerfile\nRUN apt-get update && apt-get install -y --only-upgrade ca-certificates && rm -rf /var/lib/apt/lists/*\n# Alpine: RUN apk upgrade --no-cache ca-certificates ca-certificates-bundle\n#   (images such as node:*-alpine ship only ca-certificates-bundle, and\n#   `apk upgrade ca-certificates` alone exits 0 having changed nothing)\n```\n\n```bash\ndocker build --pull --no-cache -t IMAGE .\n```\n\nWhere the distro has no fixed package yet, distrust the two roots. These commands\ncome from the advisory:\n\n```bash\n# Debian/Ubuntu\nsed -i -e 's|^mozilla/emSign_ECC_Root_CA_-_G3.crt|!&|' -e 's|^mozilla/Comodo_AAA_Services_root.crt|!&|' \\\n  /etc/ca-certificates.conf && update-ca-certificates\n# Alpine\nsed -i -e 's|^mozilla/emSign_ECC_Root_CA_-_G3.crt|!&|' /etc/ca-certificates.conf && update-ca-certificates\n# Fedora/RHEL/Rocky/Alma/Amazon Linux 2023\nd=/etc/pki/ca-trust/source/blocklist; [ -d $d ] || d=/etc/pki/ca-trust/source/blacklist\ntrust extract --overwrite --format=pem-bundle --filter='pkcs11:object=Comodo%20AAA%20Services%20root;type=cert' $d/Comodo_AAA_Services_root.pem &&\ntrust extract --overwrite --format=pem-bundle --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' $d/emSign_ECC_Root_CA_-_G3.pem &&\nupdate-ca-trust\n# NixOS: security.pki.caCertificateBlacklist = [ \"Comodo AAA Services root\" \"emSign ECC Root CA - G3\" ];\n```\n\nDistroless and scratch images have no package manager. Rebuild them on a\nrefreshed base (`gcr.io/distroless/*` and `cgr.dev/chainguard/*` republish), or\n`COPY` a fixed `/etc/ssl/certs/ca-certificates.crt` from a patched builder stage.\n\n## macOS developer machines\n\nmacOS has three trust paths, and each needs its own fix:\n\n1. **Apple's own tools** (`/usr/bin/curl`, `git`, `perl`, `ruby`, `openssl`) read\n   `/etc/ssl/cert.pem`, which Apple has not updated, and fall back to\n   `Security.framework`, which soft-fails open on the G3B chains.\n2. **Apple's `/usr/bin/python3`** (LibreSSL) ignores `SSL_CERT_FILE` entirely and\n   always loads `/etc/ssl/cert.pem`, even when the variable points at an empty\n   file. Keychain settings don't reach it either. The only fix is to filter\n   `/etc/ssl/cert.pem` itself, which needs sudo, and a macOS update can put the\n   old file back. Prefer a python.org, Homebrew or uv Python with a fixed certifi,\n   and re-check after every OS update.\n3. **Safari, Chrome and every app on Apple's trust** read the Keychain.\n\nFor the shell, write a filtered bundle and point the env-honouring clients at it.\nFilter by key, not by name, so a renamed copy can't slip through:\n\n```bash\npython3 trust_store.py --filter ~/.ca-cert.pem /etc/ssl/cert.pem\ncat >> ~/.zshrc <<'EOF'\nexport SSL_CERT_FILE=\"$HOME/.ca-cert.pem\"\nexport CURL_CA_BUNDLE=\"$HOME/.ca-cert.pem\"\nexport GIT_SSL_CAINFO=\"$HOME/.ca-cert.pem\"\nexport PIP_CERT=\"$HOME/.ca-cert.pem\"\nEOF\n```\n\n`OPENSSL_X509_TEA_DISABLE=1` made no measurable difference when tested, so don't\ncount it as a fix. The filter also drops AAA Certificate Services, so a legacy site\nwhose chain reaches only AAA will fail for these clients. That is the tradeoff;\ngithub.com, pypi.org and Sectigo's own sites still work.\n\nFor the Keychain, deny the emSign roots and the eight intermediates (all of\nthem, including the AAA-signed G3B and G3C copies). Don't deny AAA Certificate\nServices itself: it anchors a large part of the web.\n\n```bash\n# Save each certificate's \"pem\" field from the advisory's feeds\n# (impacted-intermediates.json, roots.json) as its own file first\nfor c in emsign-ecc-root-g3.pem emsign-root-tls-g3.pem emsign-root-cs-g3.pem em-*-g3b.pem em-*-g3c.pem; do\n  security add-trusted-cert -r deny -k ~/Library/Keychains/login.keychain-db \"$c\"\ndone\nsecurity verify-cert -c em-dv-tls-g3b.pem   # must report \"Trust Setting: deny\"\n```\n\nEnvironment variables reach only shells. Anything launched by launchd, a GUI app or\ncron never sees them, and `/usr/bin/curl` that shows 12/12 refused in your shell\nshows 0/12 there. So run `probe_runtime.sh` twice: once in a new shell, and once\nwith `env -i HOME=\"$HOME\" PATH=/usr/bin:/bin sh probe_runtime.sh`. The machine is\ndone only when both show 12/12 refused for every client it uses, or when each\nclient that fails the second run is one that never runs outside a shell.\n\nAlso update Homebrew's `ca-certificates`, Docker Desktop (4.96.2), Claude Code\n(2.1.303), mise (2026.10.17), uv, and every python.org install's pip and certifi.\n`docker desktop update` restarts Docker and kills running containers, so warn\nwhoever owns them first. Homebrew's `bun` formula can lag the fix: check\n`bun --version` against 1.4.4, not the formula's name.\n\n### Version managers keep the old runtimes\n\nnvm, fnm, volta, asdf, mise, pyenv, uv's managed Pythons, Homebrew's versioned\nformulas and SDKMAN keep every runtime they ever installed, and a project's\nversion file can select an old one at any time. List each manager's installs\n(`fnm list`, `nvm ls`, `asdf list`, `mise ls`, `uv python list --only-installed`,\n`pyenv versions`, `sdk list java`), probe each one with `PROBE_NODE=` /\n`PROBE_PYTHON=`, and uninstall the ones that fail. `fnm uninstall` silently drops\naliases such as `lts-latest`, so recreate them. uv-managed Pythons have no certifi\nof their own; their pip upgrade needs `--break-system-packages`.\n\n### Fix the trust before you upgrade\n\nAn upgrade downloads over the connection you are trying to fix: `bun upgrade`,\n`uv self update`, `npm i -g`, `brew upgrade` and `rustup update` all run on the\nvulnerable client. Apply the trust fix first (the filtered bundle, or run the\nupgrade with a client already known to refuse the chains), then upgrade, then\nverify the hash or signature of what arrived where the tool offers one.\n\n### Binaries that embed a runtime\n\nA CLI built with Node SEA, `pkg`, `nexe`, `bun build --compile` or `deno compile`\ncarries its own runtime and roots, and ignores the shell fixes above. They hide in\n`npm`/`pnpm` globals, `~/.local/bin`, `/usr/local/bin`, `/opt/homebrew/bin` and\n`/Applications`. Sweep those directories:\n\n```bash\nfor f in ~/.local/bin/* /usr/local/bin/* /opt/homebrew/bin/* \"$(npm root -g)\"/.bin/*; do\n  [ -f \"$f\" ] || continue\n  if grep -qa NODE_SEA_FUSE \"$f\"; then echo \"node SEA: $f\"\n  elif grep -qa 'Bun v1\\.' \"$f\"; then echo \"bun: $f ($(BUN_BE_BUN=1 \"$f\" --version 2>/dev/null))\"\n  fi\ndone\npython3 scan_repo.py ~/.local/bin /usr/local/bin   # embedded roots, by key\n```\n\n`BUN_BE_BUN=1  --version` prints the embedded Bun. For an embedded Node,\nrun ` -p process.version` where the tool allows it, or read the tool's\nrelease notes. Report the embedded version, not the file's mtime: a binary whose\nmtime changed can still carry the old runtime. Some CLIs can be told to run on\nthe PATH runtime instead (for example `VERCEL_CLI_USE_NATIVE_BINARY=0` for the\nVercel CLI releases that embed Node 24.14.1); otherwise wait for a vendor build\non a fixed runtime and treat the binary as exposed until then.\n\n## Python\n\n| Component | Fixed | Trust source |\n|---|---|---|\n| certifi | 2026.10.19 | requests, httpx, boto3, google-auth, the openai SDK (through httpx). botocore falls back to its own vendored `cacert.pem` when certifi isn't installed (1.43.108 accepts the 6 AAA chains, 1.43.117 is fixed), grpcio ships `roots.pem`, and httplib2 uses certifi if importable, else its bundled `cacerts.txt`: check those files with `trust_store.py` too |\n| The OS store, not certifi | fix the OS store | the anthropic SDK 1.14+ (httpx2 with truststore: bumping certifi changed nothing there), PyJWT's `PyJWKClient`, aiohttp, slack_sdk, and Ubuntu's `python3-requests` |\n| pip | 26.2.2 | vendored certifi plus the system store, always both |\n| uv | 0.13.4 | bundled webpki-roots unless `UV_SYSTEM_CERTS=true` / `--native-tls` |\n| pixi | 0.82.1 | |\n| sigstore | 4.5.1 | |\n| CPython `ssl` | 3.15.1, 3.14.9 and 3.13.17 were announced with an SPKI denylist (gh-160042). Field runs disagreed on whether 3.14.9 actually blocks the keys, so count it only when the probe's `python-ssl-default` line shows `ok` with an unpatched OS store | the OS store, through OpenSSL |\n\nTo fix:\n\n- Bump `certifi>=2026.10.19` in **every lockfile**: `uv lock --upgrade-package certifi`,\n  `poetry update certifi`, `pip-compile -P certifi`.\n- Upgrade pip securely first: `python -m pip install --upgrade \"pip>=26.2.2\"`. On a\n  network you do not trust, install the wheel from its URL with the SHA-256 in the\n  Python thread.\n- Container builds: add `RUN python -m pip install --no-cache-dir --upgrade \"pip>=26.2.2\" \"certifi>=2026.10.19\"`\n  before installing anything else. `PIP_CERT` is **not** a fix on its own: an\n  older pip pointed at a patched store still accepted 12 of 12, and pip 26.2.2\n  trusts its certifi and the OS store together, so both have to be fixed.\n- Python 3.8 and 3.9 can't install pip 26.2.2. Move off them, or rewrite pip's\n  vendored bundle with `trust_store.py --filter` and check it again; record it as\n  a mitigation, not a fix.\n- Every existing venv carries its own pip and certifi: dev machines, CI caches,\n  AMIs, and Lambda deployment packages and layers, which vendor certifi.\n- The AWS, Google Cloud and Azure CLIs are frozen Python apps with their own\n  certifi (or botocore bundle). Update the CLI itself; the system Python's certifi\n  doesn't reach them. Point `scan_repo.py` at the CLI's install directory to\n  check its bundle.\n- uv: run `UV_SYSTEM_CERTS=true uv self update` on machines, and in images bump\n  `COPY --from=ghcr.io/astral-sh/uv:0.13.4` (or later).\n\nTo confirm in the artifact, `probe_runtime.sh` covers both `ssl` and certifi. For\nthe bundles alone, run `trust_store.py python` (certifi and pip's vendored copy, for\nevery python on PATH), or `trust_store.py /path/to/venv/bin/python` for one env.\n\n### Conda, mamba, pixi environments\n\nA conda environment carries its **own** `ca-certificates`, OpenSSL and certifi.\nPython in the env reads `$CONDA_PREFIX/ssl/cacert.pem`, not the OS store, so a\npatched base image does nothing for it.\n\n```bash\nconda update -n ENV ca-certificates certifi openssl     # or: mamba / micromamba\npython3 trust_store.py \"$CONDA_PREFIX/ssl/cacert.pem\" \"$CONDA_PREFIX/bin/python\"\n```\n\nBump `ca-certificates` and `certifi` in `environment.yml`, conda-lock files, and\nexplicit lockfiles. Any `ca-certificates` build dated before 2026-10-19 is\nvulnerable. For pixi, upgrade pixi itself (0.82.1) and run\n`pixi update ca-certificates certifi`. Conda base images\n(`continuumio/miniconda3`, `condaforge/miniforge3`, `mambaorg/micromamba`) need\nthe update inside the image. Rebuilding on a newer tag isn't enough until\nthose images republish.\n\n## Node.js, npm, yarn, pnpm, Electron, Deno, Bun\n\n| Runtime | Fixed | Notes |\n|---|---|---|\n| Node.js | 22.23.4, 24.22.1, 26.12.1 | Bundled NSS roots plus a public-key block. No other line is patched: Node 20 and other EOL majors must move to a supported line |\n| Electron | 44.9.1, 43.8.1, 42.11.16 | The app ships its own Node and Chromium net stack, so users need a new app build |\n| Deno | 2.9.8 | |\n| Bun | 1.4.4 (roots updated to NSS 3.131.1, released 2026-10-22) | 1.3.11 through 1.4.3 trust the six emSign-path chains. This includes `bun build --compile` binaries, which embed Bun's roots, so rebuild and reship them. See \"Bun\" below |\n\n`NODE_EXTRA_CA_CERTS` only *adds* roots, so it cannot fix anything.\n`NODE_USE_SYSTEM_CA=1` / `--use-system-ca` did **not** fix Node in field tests: it\nstill accepted the emSign chains on a fixed OS store. `--use-openssl-ca` with a\nfixed OS store refused all 12, so it is a stopgap, confirmed by the probe.\nUpgrading Node is the real fix. npm, yarn and pnpm use Node's TLS, so CI and every\nbuild image need the new Node too.\n\nElectron bundles its own Node; judge it by Electron's version, not the Node\nversion it reports (Electron 44.9.3 reports Node 24.22.0 and refuses all 12).\nDon't raise a `.mcpb` manifest's `compatibility.runtimes.node` to 24.22.1: Claude\nDesktop matches it against Electron's reported 24.22.0 and falls back to any\nsystem Node on a mismatch, which is worse.\nProbe from the main process, where Node's `tls` runs, not from a renderer.\n\nTo confirm, `node --version` in the running container, plus `probe_runtime.sh`.\n\n**Stopgap where Node can't be upgraded yet.** Use this rarely: see \"Trust patching\nin application code\" in SKILL.md step 3. For most services on a managed runtime,\nthe answer is to record the gap and redeploy when the platform ships a fixed Node.\nOn Node 22.19+ and 24.5+, which have `tls.setDefaultCACertificates`, drop the affected roots from the default store at\nstartup, before any connection is made, for example in Next.js's\n`instrumentation.ts`. Filter by key, not by name. Tested on a managed runtime,\nthis took the advisory's hosts from 6 of 12 accepted to 12 of 12 refused.\n\n```js\nimport tls from \"node:tls\";\nimport { X509Certificate, createHash } from \"node:crypto\";\n// The SPKI SHA-256 values in emudhra_certs.py (BAD_ROOTS and BAD_INTERMEDIATES)\nconst AFFECTED = new Set([\"8D417DB2DD8BF5E3084D1E3F196D583849D81BDD4C00C70B9D39369E96B8C782\", /* ... */]);\nconst spki = (pem) => createHash(\"sha256\")\n  .update(new X509Certificate(pem).publicKey.export({ type: \"spki\", format: \"der\" })).digest(\"hex\").toUpperCase();\ntls.setDefaultCACertificates(tls.getCACertificates(\"default\").filter((pem) => {\n  try { return !AFFECTED.has(spki(pem)); } catch { return false; }  // unparsable: drop it\n}));\n```\n\nLoad it before build-time scripts too (migrations, `next build` data fetching),\nwhich run in the same exposed runtime with credentials, for example with\n`node --import ./tls-trust.mjs`. A redeploy alone does not move a managed\nplatform's Node.\n\nIt covers only connections that use the default store: a client given its own\n`ca:` option, a child process, or a worker that loads before it is not covered.\nProbe the deployed runtime after shipping it, and keep the Node upgrade on the\nlist. Keep the stopgap to one small file, and say in the PR when to delete it: once\nthe runtime's Node is at a fixed version. The pnpm standalone build (`@pnpm/exe`, `get.pnpm.io`) embeds its own Node,\nso it needs its own update.\n\n### Bun\n\nBun ships its own copy of the Mozilla roots, and `bun build --compile` bakes that\ncopy into the binary. Nothing outside the binary fixes it, and a LaunchAgent or\nservice never reads the shell variables from the macOS steps. The fix is Bun 1.4.4\nor later, then a rebuild and a new release of every compiled binary.\n\nBun has no environment-variable CA override: `NODE_USE_SYSTEM_CA` had no effect on\nBun 1.3.10, and Bun 1.3.11 on macOS accepted all 12 chains. `bunfig.toml`\n`[install] cafile` covers `bun install` and `bunx` only. A CLI compiled with Bun\n(Supabase's was on Bun 1.4.2) needs its vendor's rebuild. Probe it in place with\n`BUN_BE_BUN=1  probe.js`.\n\n- **Don't use a per-request CA pin as a stopgap.** Bun's `fetch` accepts\n  `tls: { ca: [...] }`, but on Bun 1.3.11 a fetch with that option still accepted\n  certificates outside the pinned CA when tested against the advisory's hosts.\n  If a release can't move to 1.4.4 yet, treat it as exposed, and say so in your\n  report.\n- **Prove the rebuild.** Run `probe_runtime.sh` where `bun` is the shipped\n  version, or, for a compiled binary, point the same code path it uses at a test\n  host: the request must fail.\n- **On macOS, don't rely on the system store for Bun.** It is the one with the G3B\n  soft-fail.\n- Record what credentials an old binary sent: a device token or API key that went\n  over these connections belongs on the rotation list for the security owner.\n\n## Go\n\nThe fixed toolchains are **1.27.3 and 1.26.10** (CVE-2026-111943, which adds an SPKI\nblocklist in `crypto/x509`).\n\n- The block is compiled into each binary, so **every Go binary must be rebuilt**:\n  services, CLIs, sidecars, operators, Terraform providers you build yourself.\n- On Linux, Go reads the OS store (`/etc/ssl/certs/...`). In `scratch` images it reads\n  whatever bundle you copied in, or `golang.org/x/crypto/x509roots/fallback` if\n  you import it. Fix those too.\n- Bump the toolchain in `go.mod` (`toolchain go1.27.3`), in the Dockerfile\n  (`FROM golang:1.27.3`), and in CI (`setup-go` `go-version`).\n- Go modules are protected by sumdb, so `go get` content is safe. The exposure is\n  your program's own HTTPS calls.\n\nTo confirm on the deployed binary itself, run `go version /path/to/binary`, or\n`go version -m`, on a copy pulled from the image. It must print 1.26.10+ or 1.27.3+.\n`probe_runtime.sh` cannot probe a Go binary from outside.\n\n### Third-party Go tools\n\nterraform and its providers, OpenTofu, packer, helm, kubectl, gh, the docker CLI and\ndaemon, containerd and runc, git-lfs, golangci-lint, trivy, goreleaser, and many\ncloud and vendor CLIs are Go programs. Each one carries the `crypto/x509` of the Go\nit was built with. They pick up the OS store on Linux, but the SPKI block is only\nin binaries built on Go \u2265 1.26.10 / 1.27.3. On a test container on 2026-10-22,\n`go_binaries.py` found docker, containerd, runc, gh, git-lfs and golangci-lint all\nbuilt on unpatched Go.\n\n- Upgrade each tool once its vendor publishes a release built on a fixed Go. Check\n  the actual binary, not the release notes: `go_binaries.py $(command -v terraform helm kubectl gh)`.\n- Until then, a fixed OS store covers the emSign-path chains for these tools on\n  Linux. On Debian and Ubuntu, though, the AAA cross-sign path stays open until\n  `ca-certificates` itself is the fixed version. The OS store is therefore the\n  stopgap, and has to be updated first.\n- The AWS provider needs a major bump: no 5.x release is built on a fixed Go, and\n  6.70 is the first that is.\n- Terraform providers are downloaded per workspace. After the vendors rebuild,\n  run `terraform init -upgrade` and check `.terraform/providers/**` with\n  `go_binaries.py`.\n\n## Java / JVM (Maven, Gradle, Kotlin, Scala, Android builds)\n\nThe OpenJDK advisory (CVE-2026-91403) lists 27.0.1, 25.0.5, 21.0.13, 17.0.21, 11.0.33\nand 8u512 \"and earlier\" as affected. The advisory's tracker lists 27.0.1.0.2,\n25.0.5.0.2, 21.0.13.0.2, 17.0.21.0.2, 11.0.33.0.2 and 8u511 as patched. The two lists\ndisagree, so **confirm the exact build with your vendor**: Temurin, Corretto, Zulu or\nOracle. Treat a JDK as fixed only if its release notes name the fix, or if the\n`trust_store.py java` check below comes back clean.\n\nA `jssecacerts` file next to `cacerts` replaces it as the default trust store, and\n`-Djavax.net.ssl.trustStore=` in `JAVA_TOOL_OPTIONS`, `JDK_JAVA_OPTIONS` or\n`_JAVA_OPTIONS` replaces both. `trust_store.py java` checks all of them; patch\nwhichever one the JVM actually reads.\n\n- **Distro JDKs** (Debian, Ubuntu, RHEL, Fedora, Arch, Gentoo, Oracle Linux) use the OS\n  cacerts. Updating `ca-certificates` (and `ca-certificates-java`) is enough.\n- **Vendor JDKs and images** (`eclipse-temurin`, `amazoncorretto`, and so on) ship their own\n  `cacerts` (`$JAVA_HOME/lib/security/cacerts`, or `$JAVA_HOME/jre/lib/security/cacerts`\n  on JDK 8), which includes **both** roots. Until you have a patched build, remove\n  them in the image:\n\n  ```dockerfile\n  COPY emudhra_certs.py trust_store.py /tmp/\n  RUN python3 /tmp/trust_store.py --delete \"$JAVA_HOME/lib/security/cacerts\" \\\n   && python3 /tmp/trust_store.py \"$JAVA_HOME/lib/security/cacerts\" \\\n   && rm /tmp/emudhra_certs.py /tmp/trust_store.py\n  ```\n\n  The script finds entries by public key, since alias names and subjects differ by\n  vendor, deletes them with keytool by path (JDK 8's keytool has no `-cacerts`\n  option), and re-reads the store: the build fails if keytool errors or an affected\n  entry survives. It needs Python in the build stage; in a JDK image without it,\n  do the deletion in a stage that has both, or copy `cacerts` out and back. Don't hand-roll this as\n  `keytool -cacerts \u2026 -delete \u2026 ; true`: on JDK 8 that fails silently and leaves both\n  roots in place.\n- An app-specific truststore (`-Djavax.net.ssl.trustStore=...`) needs the same edit.\n- Maven and Gradle downloads use the build JDK, so patch CI as well. A Gradle\n  toolchain (`JavaLanguageVersion.of(N)`) may auto-provision a separate JDK\n  through the foojay resolver into `~/.gradle/jdks/`. Its `cacerts` needs the\n  same check, and so does the JDK that Gradle itself runs on.\n\nTo confirm in the running JVM's image, run `trust_store.py java` (or pass the\nkeystore path for an app truststore; set `STOREPASS` if it isn't `changeit`). It\nmust print CLEAN and exit 0. ERROR or exit 2 means the store couldn't be read\ncompletely, which is not a pass. If a vendor's patched build still holds an\naffected root but says it blocks the keys another way, it stays VULNERABLE in\nyour inventory until `probe_runtime.sh`'s java line in that image exits `ok` on all\n12 chains.\n\n## Rust\n\n| Crate or tool | Fixed |\n|---|---|\n| webpki-roots, webpki-root-certs | 1.0.10 (0.26.x re-exports 1.x, so check the 1.x entry in `Cargo.lock`) |\n| rustls-webpki | 0.103.16 |\n| rustup | 1.29.2 |\n\nRun `cargo update -p webpki-roots -p rustls-webpki`, then rebuild and redeploy every\nbinary. Crates that use `native-tls`, or `rustls-native-certs` /\n`rustls-platform-verifier`, follow the OS store instead. cargo itself uses the OS\nstore through curl.\n\n## PHP, Ruby, Elixir/Erlang, Perl, .NET\n\n| Stack | Fix |\n|---|---|\n| PHP | `composer/ca-bundle` 1.4.16 or 1.6.0 (1.5.x is not fixed). Guzzle and Symfony HttpClient otherwise use the OS store or `openssl.cafile` |\n| Ruby | Uses OpenSSL's store: fix the OS store. Check for vendored bundles (`ssl_ca_file`, the `certified` gem) |\n| Elixir | `castore` 1.0.22 |\n| Erlang | hex `certifi`: pending (certifi/erlang-certifi#56). Point `:ssl` at the fixed OS bundle via `public_key:cacerts_get()` (OTP 25+) |\n| Perl | `Mozilla::CA` 20261020 |\n| .NET (and NuGet) | Windows: Microsoft's CTL update. Linux and macOS: the OS store, through OpenSSL on Linux. Rebuild `mcr.microsoft.com/dotnet/*` images on a base published after 2026-10-20, and check the image's store with `trust_store.py system`. `probe_runtime.sh`'s curl/openssl line stands in for .NET on Linux, because both read the same store |\n\n## Tools and platforms\n\n| Tool | Fixed |\n|---|---|\n| Claude Code | 2.1.303 |\n| Docker Desktop | 4.96.2 |\n| mise | 2026.10.17 |\n| Cloudflare CFSSL trust store | 2026.10.1 |\n| Freedesktop SDK (Flatpak) | 25.08.19, 26.08.3 |\n\nGitHub-hosted runners pick up new images on GitHub's schedule, and old and new\nimages serve jobs side by side. Until all are on ca-certificates 20260816, upgrade\nthe package in the job (deployed-verification.md, \"CI/CD runners\"). Confirm by\nrunning `probe_runtime.sh` in a workflow on a throwaway branch, not in a merged\nchange. BuildKit from `docker/setup-buildx-action`'s default\n`moby/buildkit:buildx-stable-1` was built on go1.26.8. v0.34.1 is on go1.26.10:\npin it with `driver-opts: image=moby/buildkit:v0.34.1`. Self-hosted runners, ARC runner images and\nGitLab runners are yours to patch: OS store, Node, JDK, pip and uv.\n\n## Databases and other clients that skip verification\n\n`sslmode=require`, `prefer` and `allow` (libpq, psycopg, postgres.js `ssl:\n'require'` or `?sslmode=require` in `DATABASE_URL`, which it turns into\n`rejectUnauthorized: false`, node-postgres) encrypt without checking the server's certificate, so\na certificate from the compromised intermediates is accepted like any other.\n`scan_repo.py` flags them. Use `sslmode=verify-full` with a patched CA file\n(`sslrootcert=`), or `ssl: { rejectUnauthorized: true, ca: ... }`.\n\n## Things that are not fixes\n\n- Setting `NODE_EXTRA_CA_CERTS`, or adding roots anywhere. Adding never removes.\n- Bumping a version in the repo without rebuilding and redeploying.\n- `docker build` with a warm cache.\n- Turning verification off (`verify=False`, `rejectUnauthorized: false`,\n  `InsecureSkipVerify`). If you find these while scanning, report them: each one\n  trusts every certificate, not just these sixteen.\n- Re-adding emSign ECC Root CA - G3 because an emSign-certified site broke.\n\n\n#!/usr/bin/env python3\n\"\"\"Part of the emudhra-ca-remediation skill.\n\nScan a source tree for components affected by the October 2026 eMudhra\nintermediate CA compromise.\n\nEvery file is read with a parser for its format (JSON, TOML, YAML, PEP 508\nrequirement lines, Dockerfile instructions, lockfile grammars), and every file\nof any kind is searched for the affected certificates and public keys by their\nbytes, so a vendored bundle, keystore, Kubernetes Secret or compiled binary is\ncaught whatever it is called. Zip-family archives (jar, war, whl, apk, nupkg)\nand tarballs, compressed or not, are opened in memory, nested ones too, and\nevery member is searched the same way; nothing is extracted to disk or run.\nUTF-16 and UTF-32 text is decoded, not skipped as binary. Each finding has a\nstatus:\n\n  VULNERABLE  the pinned version predates the fix, or its release line has none,\n              or the file carries an affected certificate or key\n  ERROR       a file that matters could not be read or parsed. Not clean\n  REVIEW      the repo cannot settle it (floating tag, a range, unpinned, a fix\n              still pending, or a setting a person has to read)\n  FIXED       the pinned version is at or past the fix\n  INFO        context: where a version comes from, a bundle that was read and\n              holds none of the affected certificates\n\nExit status: 1 if anything is VULNERABLE, else 2 on any ERROR, else 3 on any\nREVIEW, else 0. Only 0 means the repo pins nothing affected, and even then it\nsays nothing about what is deployed: SKILL.md covers checking the running\nartifact. A tree in which nothing was recognised is an ERROR, not a pass.\n\nThe tables are a snapshot; check_advisory.py reports what changed since.\n\nStandard library, plus PyYAML for YAML and tomli on Pythons before 3.11. When\none is missing, the files it would parse are ERROR rows.\n\n    python3 scan_repo.py PATH [PATH ...] [--json] [--all] [--no-info]\n\"\"\"\n\nimport argparse\nimport ast\nimport bz2\nimport codecs\nimport configparser\nimport gzip\nimport io\nimport json\nimport lzma\nimport os\nimport re\nimport shlex\nimport sys\nimport tarfile\nimport zipfile\n\nsys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))\nimport emudhra_certs as E  # noqa: E402\nimport trust_store  # noqa: E402\n\ntry:\n    import tomllib\nexcept ImportError:\n    try:\n        import tomli as tomllib\n    except ImportError:\n        tomllib = None\ntry:\n    import yaml\nexcept ImportError:\n    yaml = None\n\n# Fixed releases per release line, from https://emudhra.we-have-a-problem.com/\n# (snapshot 2026-10-22). A line missing from a table has no fix: upgrade it.\nNODE_FIXED = {22: (22, 23, 4), 24: (24, 22, 1), 26: (26, 12, 1)}\nGO_FIXED = {(1, 26): (1, 26, 10), (1, 27): (1, 27, 3)}\nELECTRON_FIXED = {42: (42, 11, 16), 43: (43, 8, 1), 44: (44, 9, 1)}\n# The OpenJDK advisory lists these builds as the last affected ones, and the\n# tracker lists the next \".0.2\" vendor build as fixed. These builds and anything\n# below are VULNERABLE (8u511 is on both lists, so it fails closed); past them,\n# confirm the vendor's build notes.\nJAVA_LAST_AFFECTED = {\n    27: (27, 0, 1), 25: (25, 0, 5), 21: (21, 0, 13),\n    17: (17, 0, 21), 11: (11, 0, 33), 8: (8, 0, 511),\n}\nDENO_FIXED = (2, 9, 8)\nBUN_FIXED = (1, 4, 4)\nBUN_COMPILED = (\"the binary embeds Bun's root store, so it stays exposed until rebuilt on Bun 1.4.4+ \"\n                \"and reshipped; check which Bun the build uses\")\nEMBEDS_RUNTIME = (\"bundles a runtime and its root store into the artifact: rebuild it on a fixed runtime and \"\n                  \"reship, then check the artifact (scan_repo.py on the binary, go_binaries.py, or a probe)\")\nSNAPSHOT_DATE = \"2026-10-22\"\nNEWER = (\"a release line newer than the %s snapshot: almost certainly fixed. Confirm with check_advisory.py, \"\n         \"then with a probe of the running artifact\" % SNAPSHOT_DATE)\n\n# Single-threshold packages: name -> (fixed version, ecosystem note)\nPY_PACKAGES = {\n    \"certifi\": ((2026, 10, 19), \"CA bundle used by requests, httpx, botocore, aiohttp and most Python HTTP clients\"),\n    \"pip\": ((26, 2, 2), \"pip loads its vendored certifi even when system certs are on\"),\n    \"uv\": ((0, 13, 4), \"uv ships webpki-roots unless UV_SYSTEM_CERTS / --native-tls is set\"),\n    \"sigstore\": ((4, 5, 1), \"\"),\n}\nCARGO_PACKAGES = {\n    \"webpki-roots\": ((1, 0, 10), \"rustls root bundle; 0.26.x is a shim over 1.x, check the 1.x entry\"),\n    \"webpki-root-certs\": ((1, 0, 10), \"rustls root bundle\"),\n    \"rustls-webpki\": ((0, 103, 16), \"rustls verifier; only the 0.103 line has the block\"),\n}\nRUSTLS_DEPS = {\"webpki-roots\", \"webpki-root-certs\", \"rustls-webpki\", \"rustls\", \"reqwest\", \"ureq\", \"hyper-rustls\",\n               \"tokio-rustls\", \"rustls-native-certs\", \"rustls-platform-verifier\"}\nHEX_PACKAGES = {\n    \"castore\": ((1, 0, 22), \"Elixir CA bundle\"),\n    \"certifi\": (None, \"Erlang certifi: fix pending upstream (certifi/erlang-certifi#56)\"),\n}\nTOOL_FIXED = {\n    \"uv\": (0, 13, 4), \"pixi\": (0, 82, 1), \"mise\": (2026, 10, 17), \"deno\": DENO_FIXED, \"claude-code\": (2, 1, 303),\n}\nGO_CLIS = {\"terraform\", \"opentofu\", \"tofu\", \"packer\", \"vault\", \"consul\", \"nomad\", \"kubectl\", \"helm\", \"gh\",\n           \"trivy\", \"goreleaser\", \"pulumi\", \"k9s\", \"kustomize\", \"argocd\", \"flux\", \"golangci-lint\", \"hugo\"}\nGO_CLI_NOTE = (\"a Go-built tool: it carries its own crypto/x509, so it stays exposed until its vendor ships a build \"\n               \"on Go >= 1.26.10 / 1.27.3. Check the installed binary with go_binaries.py\")\nGO_CLI_ACTIONS = {\"hashicorp/setup-terraform\", \"azure/setup-helm\", \"azure/setup-kubectl\", \"opentofu/setup-opentofu\",\n                  \"hashicorp/setup-packer\", \"pulumi/actions\", \"aquasecurity/trivy-action\",\n                  \"goreleaser/goreleaser-action\", \"golangci/golangci-lint-action\", \"cli/gh-extension-precompile\",\n                  \"docker/setup-buildx-action\"}  # BuildKit's default buildx-stable-1 image was on go1.26.8\nCONDA_CA_FIXED = (2026, 10, 19)  # a conda ca-certificates build older than the fix cannot contain it\n\n# Pruned unless --all. Virtualenvs are pruned by their pyvenv.cfg, whatever\n# they are called. Every pruned directory is listed in the coverage summary.\nSKIP_DIRS = {\n    \".git\", \"node_modules\", \"__pycache__\", \".tox\", \".mypy_cache\", \".pytest_cache\",\n    \"target\", \".next\", \".terraform\", \"site-packages\", \".gradle\", \".idea\",\n}\nRANGE = re.compile(r\"^\\s*(?:[\\^~<>*]|latest\\b)|[|\\s]|\\.[xX*]|^\\d+(?:\\.\\d+)?$\")\nMAX_BYTES = 64 * 1024 * 1024\nCHUNK = 16 * 1024 * 1024\n# This skill names the CA everywhere; never report it against itself.\nSKILL_ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))\n# Copies of the skill's own scripts dropped into a repo are skipped too, by\n# name and marker together, so the marker alone hides nothing.\nSKILL_MARKER = b\"Part of the emudhra-ca-remediation skill\"\nSKILL_FILES = {\"scan_repo.py\", \"trust_store.py\", \"emudhra_certs.py\", \"go_binaries.py\", \"check_advisory.py\",\n               \"probe_runtime.sh\", \"test_scripts.py\"}\nSTORE_EXT = {\".jks\", \".jceks\", \".keystore\", \".truststore\", \".p12\", \".pfx\", \".bks\", \".der\", \".cer\", \".crt\", \".pem\"}\nKEYSTORE_EXT = {\".jks\", \".jceks\", \".keystore\", \".truststore\", \".p12\", \".pfx\", \".bks\"}\n\n# Text hints. They can only add findings; nothing is ever cleared by them.\nTRUST_KNOBS = re.compile(\n    r\"REQUESTS_CA_BUNDLE|SSL_CERT_FILE|SSL_CERT_DIR|CURL_CA_BUNDLE|NODE_EXTRA_CA_CERTS|AWS_CA_BUNDLE\"\n    r\"|PIP_CERT|UV_NATIVE_TLS|UV_SYSTEM_CERTS|--use-system-ca|--use-openssl-ca|NODE_USE_SYSTEM_CA\"\n    r\"|DENO_TLS_CA_STORE|DENO_CERT|GIT_SSL_CAINFO|javax\\.net\\.ssl\\.trustStore|truststore\\.inject_into_ssl\"\n)\nTLS_DISABLED = re.compile(\n    r\"verify\\s*=\\s*False|rejectUnauthorized\\s*:\\s*false|InsecureSkipVerify\\s*:\\s*true|insecure_skip_verify\"\n    r\"|NODE_TLS_REJECT_UNAUTHORIZED\\s*[=:]\\s*['\\\"]?0|danger_accept_invalid_certs\\s*\\(\\s*true\"\n    r\"|CURLOPT_SSL_VERIFYPEER\\s*,\\s*(?:false|0)|--insecure\\b|\\bcurl\\b[^\\n|;&]*\\s-\\w*k\\w*\\b|--no-check-certificate\"\n    r\"|strict-ssl\\s*[=:]?\\s*false|ssl_verify\\s*[=:]\\s*false|sslVerify\\s*=?\\s*false|CERT_NONE\"\n)\n# Encrypts but accepts any server certificate, so a certificate from the\n# compromised intermediates is accepted too (libpq, postgres.js, node-postgres).\nTLS_UNVERIFIED = re.compile(\n    r\"sslmode\\s*[=:]\\s*['\\\"]?(?:require|prefer|allow)\\b|\\bssl\\s*:\\s*['\\\"](?:require|prefer|allow)['\\\"]\"\n    r\"|ssl\\s*:\\s*\\{[^}]*rejectUnauthorized\\s*:\\s*false\"\n)\n# Names of the affected certificates as they appear in pin lists, truststore\n# aliases and config. The certificates themselves are found by their bytes.\nEMUDHRA_MENTION = re.compile(r\"emSign (?:ECC )?Root|EM (?:DV|OV|EV) (?:TLS|CS) CA|emsign[a-z]*root\", re.I)\nCODE_EXT = {\n    \".py\", \".js\", \".mjs\", \".cjs\", \".ts\", \".tsx\", \".go\", \".rs\", \".java\", \".kt\", \".kts\", \".scala\",\n    \".rb\", \".php\", \".cs\", \".ex\", \".exs\", \".sh\", \".bash\", \".zsh\", \".ps1\", \".yml\", \".yaml\", \".toml\", \".env\",\n    \".json\", \".cfg\", \".ini\", \".conf\", \".tf\", \".hcl\", \".properties\", \".gradle\", \".xml\", \".nix\", \".j2\", \".tpl\",\n}\n\nfindings = []\ncoverage = {\"files\": 0, \"parsed\": {}, \"pruned\": [], \"symlinked_dirs\": [], \"unreadable\": [], \"large\": [],\n            \"missing_parsers\": {}}\nrecognised = [0]\nelectron_declared = {}     # dir -> (path, spec) from package.json\nelectron_resolved = set()  # dirs whose lockfile resolved electron\ncargo_manifests = []       # (dir, path, deps) of Cargo.toml files that use rustls\ncargo_locks = set()\npy_consumers = {}          # dir -> (path, names) of manifests using certifi's consumers\ncertifi_pinned = set()     # dirs whose manifest or lockfile names certifi\npackage_jsons = []         # paths of package.json files\nnode_seen = [False]        # whether anything in the tree names the Node version\n\n\nPRERELEASE = re.compile(r\"\\d[-.~_+]?(?:alpha|beta|rc|pre|preview|dev|canary|nightly|next|snapshot|a|b)\\.?\\d*(?![a-z])\", re.I)\n\n\ndef add(status, path, component, version, detail):\n    # A pre-release of the fixed version comes before it: never FIXED.\n    if status == \"FIXED\" and PRERELEASE.search(str(version or \"\")):\n        status, detail = \"REVIEW\", \"a pre-release; it sorts before the release that carries the fix. \" + detail\n    row = {\"status\": status, \"path\": path, \"component\": component, \"version\": str(version or \"\"), \"detail\": detail}\n    if row not in findings:\n        findings.append(row)\n\n\ndef parsed(kind):\n    coverage[\"parsed\"][kind] = coverage[\"parsed\"].get(kind, 0) + 1\n    recognised[0] += 1\n\n\ndef vtuple(text):\n    \"\"\"'v22.11.0-alpine' -> (22, 11, 0); None when no leading number.\"\"\"\n    m = re.match(r\"\\s*[v=^~]*\\s*(\\d+(?:\\.\\d+)*)\", str(text or \"\"))\n    return tuple(int(p) for p in m.group(1).split(\".\")) if m else None\n\n\ndef pad(t, n):\n    return tuple(t) + (0,) * (n - len(t))\n\n\ndef dotted(t):\n    return \".\".join(map(str, t))\n\n\ndef split_words(s):\n    try:\n        return shlex.split(s)\n    except ValueError:\n        return s.split()\n\n\n# ---------------------------------------------------------------- judges\n\ndef judge_threshold(path, component, version, fixed, note=\"\"):\n    v = vtuple(version)\n    if fixed is None:\n        add(\"REVIEW\", path, component, version, note or \"no fixed release yet\")\n    elif v is None:\n        add(\"REVIEW\", path, component, version, \"unpinned or unparsable; check the resolved/deployed version. \" + note)\n    elif pad(v, 3) < fixed:\n        add(\"VULNERABLE\", path, component, version, \"fixed in %s. %s\" % (dotted(fixed), note))\n    else:\n        add(\"FIXED\", path, component, version, note)\n\n\ndef judge_node(path, version, source):\n    node_seen[0] = True\n    v = vtuple(version)\n    comp = \"node (%s)\" % source\n    if v is None:\n        add(\"REVIEW\", path, comp, version, \"floating version; check the deployed runtime\")\n    elif v[0] > max(NODE_FIXED):\n        add(\"REVIEW\", path, comp, version, NEWER)\n    elif v[0] not in NODE_FIXED:\n        add(\"VULNERABLE\", path, comp, version, \"no patched release on Node %d; move to 22.23.4, 24.22.1 or 26.12.1\" % v[0])\n    elif len(v) < 3:\n        add(\"REVIEW\", path, comp, version, \"floating minor; rebuild/redeploy and confirm >= %s\" % dotted(NODE_FIXED[v[0]]))\n    elif v < NODE_FIXED[v[0]]:\n        add(\"VULNERABLE\", path, comp, version, \"fixed in %s\" % dotted(NODE_FIXED[v[0]]))\n    else:\n        add(\"FIXED\", path, comp, version, \"\")\n\n\ndef judge_go(path, version, source):\n    version = str(version)\n    v = vtuple(version[2:] if version.startswith(\"go\") else version)\n    comp = \"go toolchain (%s)\" % source\n    note = \"Go programs carry crypto/x509 statically: every binary must be rebuilt with the fixed toolchain\"\n    if v is None or len(v) < 2:\n        add(\"REVIEW\", path, comp, version, \"floating version. \" + note)\n        return\n    line = v[:2]\n    if line not in GO_FIXED:\n        if line < (1, 26):\n            add(\"VULNERABLE\", path, comp, version, \"no patched release on Go %d.%d; move to 1.26.10 or 1.27.3. %s\" % (line + (note,)))\n        else:\n            add(\"REVIEW\", path, comp, version, NEWER)\n    elif len(v) < 3:\n        add(\"REVIEW\", path, comp, version, \"floating patch; confirm >= %s. %s\" % (dotted(GO_FIXED[line]), note))\n    elif v < GO_FIXED[line]:\n        add(\"VULNERABLE\", path, comp, version, \"fixed in %s. %s\" % (dotted(GO_FIXED[line]), note))\n    else:\n        add(\"FIXED\", path, comp, version, \"binaries built before the bump still need a rebuild\")\n\n\ndef java_tuple(version):\n    \"\"\"'8u432-b06' / '1.8.0_432' -> (8, 0, 432); '21.0.4_7' -> (21, 0, 4).\"\"\"\n    s = str(version).strip()\n    m = re.match(r\"(?:8u|1\\.8\\.0_)(\\d+)\", s)\n    if m:\n        return (8, 0, int(m.group(1)))\n    return vtuple(s)\n\n\ndef java_image_tag(tag, build_tool=False):\n    \"\"\"Pull the JDK version out of an image tag: 'maven:3.9.6-eclipse-temurin-21' -> '21',\n    'gradle:8.5-jdk21' -> '21', 'eclipse-temurin:21.0.4_7-jre' -> '21.0.4_7-jre'. A\n    maven/gradle tag that names no JDK gives '', which is reported as REVIEW rather than\n    reading the build tool's version as Java's.\"\"\"\n    m = re.search(r\"(?:eclipse-temurin|amazoncorretto|corretto|zulu|semeru|sapmachine|jdk|jre)-?(\\d[\\w.]*)\", tag)\n    if m:\n        return m.group(1)\n    return \"\" if build_tool else tag\n\n\ndef judge_java(path, version, source):\n    v = java_tuple(version)\n    comp = \"java runtime (%s)\" % source\n    if v is None:\n        add(\"REVIEW\", path, comp, version, \"no JDK version in the tag or unparsable; check the deployed JDK\")\n        return\n    major = v[0]\n    if major not in JAVA_LAST_AFFECTED:\n        add(\"VULNERABLE\" if major < 27 else \"REVIEW\", path, comp, version,\n            \"no patched release listed for Java %d\" % major)\n    elif len(v) < 3:\n        add(\"REVIEW\", path, comp, version, \"floating tag; rebuild with --pull and check the deployed JDK build\")\n    elif pad(v, 3) <= JAVA_LAST_AFFECTED[major]:\n        add(\"VULNERABLE\", path, comp, version,\n            \"at or before %s, the last affected build; update the JDK\" % dotted(JAVA_LAST_AFFECTED[major]))\n    else:\n        add(\"REVIEW\", path, comp, version,\n            \"past %s: confirm the vendor build carries the 2026-10-21 fix (OpenJDK CVE-2026-91403). \"\n            \"Distro JDKs use the OS cacerts, so updating ca-certificates covers them\" % dotted(JAVA_LAST_AFFECTED[major]))\n\n\ndef judge_electron(path, version):\n    version = str(version)\n    v = vtuple(version)\n    if v is not None and RANGE.search(version):\n        add(\"REVIEW\", path, \"electron\", version, \"a range, not a version; check the resolved version in the lockfile\")\n    elif v is None:\n        add(\"REVIEW\", path, \"electron\", version, \"unpinned\")\n    elif v[0] > max(ELECTRON_FIXED):\n        add(\"REVIEW\", path, \"electron\", version, NEWER)\n    elif v[0] not in ELECTRON_FIXED:\n        add(\"VULNERABLE\", path, \"electron\", version, \"no patched release on Electron %d; move to 42.11.16, 43.8.1 or 44.9.1\" % v[0])\n    elif pad(v, 3) < ELECTRON_FIXED[v[0]]:\n        add(\"VULNERABLE\", path, \"electron\", version, \"fixed in %s; ship a new app build\" % dotted(ELECTRON_FIXED[v[0]]))\n    else:\n        add(\"FIXED\", path, \"electron\", version, \"\")\n\n\ndef judge_bun(path, version, source):\n    bare = re.sub(r\"^bun@|^bun-v\", \"\", str(version or \"\"))\n    v = vtuple(bare)\n    comp = \"bun (%s)\" % source\n    if v is None or len(v) < 3:\n        add(\"REVIEW\", path, comp, version, \"floating or unparsable; check the Bun that actually runs (fixed in 1.4.4)\")\n    else:\n        judge_threshold(path, comp, bare, BUN_FIXED, \"rebuild and reship any `bun build --compile` binary too\")\n\n\ndef judge_deno(path, version, source):\n    judge_threshold(path, \"deno (%s)\" % source, version, DENO_FIXED, \"rebuild and reship any `deno compile` binary too\")\n\n\ndef judge_uv(path, version, source):\n    judge_threshold(path, \"uv (%s)\" % source, version, TOOL_FIXED[\"uv\"])\n\n\ndef judge_composer_ca_bundle(path, version):\n    v = vtuple(version)\n    if v is None:\n        add(\"REVIEW\", path, \"composer/ca-bundle\", version, \"unparsable\")\n    elif pad(v, 3) < (1, 4, 16) or (1, 5, 0) <= pad(v, 3) < (1, 6, 0):\n        add(\"VULNERABLE\", path, \"composer/ca-bundle\", version, \"fixed in 1.4.16 and 1.6.0\")\n    else:\n        add(\"FIXED\", path, \"composer/ca-bundle\", version, \"\")\n\n\ndef judge_conda(path, name, ver):\n    if name == \"certifi\":\n        judge_threshold(path, \"certifi (conda)\", ver, PY_PACKAGES[\"certifi\"][0], \"conda env's certifi\")\n    elif name == \"ca-certificates\":\n        v = vtuple(ver)\n        if v is None:\n            add(\"REVIEW\", path, \"ca-certificates (conda)\", ver, \"unparsable; check $CONDA_PREFIX/ssl/cacert.pem with trust_store.py\")\n        elif pad(v, 3) < CONDA_CA_FIXED:\n            add(\"VULNERABLE\", path, \"ca-certificates (conda)\", ver,\n                \"conda envs use their own bundle at $CONDA_PREFIX/ssl/cacert.pem, not the OS store; update it\")\n        else:\n            add(\"REVIEW\", path, \"ca-certificates (conda)\", ver,\n                \"dated after the fix; confirm with trust_store.py on $CONDA_PREFIX/ssl/cacert.pem\")\n\n\n# URL shapes that pin a runtime or tool version in a download.\nURL_RULES = [\n    (re.compile(r\"astral\\.sh/uv/(\\d[\\w.]*)/install\"), lambda p, v: judge_uv(p, v, \"install script\")),\n    (re.compile(r\"github\\.com/astral-sh/uv/releases/download/(\\d[\\w.]*)/\"), lambda p, v: judge_uv(p, v, \"download\")),\n    (re.compile(r\"nodejs\\.org/dist/v(\\d[\\w.]*)/\"), lambda p, v: judge_node(p, v, \"download\")),\n    (re.compile(r\"(?:go\\.dev/dl|dl\\.google\\.com/go)/go(\\d[\\d.]*\\d)\\.\"), lambda p, v: judge_go(p, v, \"download\")),\n    (re.compile(r\"github\\.com/oven-sh/bun/releases/download/bun-v(\\d[\\w.]*)/\"), lambda p, v: judge_bun(p, v, \"download\")),\n    (re.compile(r\"github\\.com/denoland/deno/releases/download/v(\\d[\\w.]*)/\"), lambda p, v: judge_deno(p, v, \"download\")),\n    (re.compile(r\"releases\\.hashicorp\\.com/(\\w+)/(\\d[\\w.]*)\"), lambda p, t, v: add(\"REVIEW\", p, \"%s download\" % t, v, GO_CLI_NOTE)),\n    (re.compile(r\"get\\.helm\\.sh/helm-v(\\d[\\w.]*)\"), lambda p, v: add(\"REVIEW\", p, \"helm download\", v, GO_CLI_NOTE)),\n    (re.compile(r\"dl\\.k8s\\.io/release/v(\\d[\\w.]*)\"), lambda p, v: add(\"REVIEW\", p, \"kubectl download\", v, GO_CLI_NOTE)),\n    (re.compile(r\"github\\.com/cli/cli/releases/download/v(\\d[\\w.]*)\"), lambda p, v: add(\"REVIEW\", p, \"gh download\", v, GO_CLI_NOTE)),\n    (re.compile(r\"/(certifi|ca-certificates)-(\\d[\\w.]*)-[^/\\s\\\"']+\\.(?:conda|tar\\.bz2)\\b\"), lambda p, n, v: judge_conda(p, n, v)),\n]\n\n\ndef scan_urls(path, text):\n    for rx, judge in URL_RULES:\n        for m in rx.finditer(text):\n            judge(path, *m.groups())\n\n\n# ---------------------------------------------------------------- requirement specs\n\nREQ_NAME = re.compile(r\"\\s*([A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?)\\s*(\\[[^\\]]*\\])?\\s*(.*)$\", re.S)\nCLAUSE = re.compile(r\"\\s*(===|==|~=|!=|<=|>=|<|>)\\s*([^\\s,]+)\\s*$\")\n\n\ndef norm(name):\n    return re.sub(r\"[-_.]+\", \"-\", str(name)).lower()\n\n\ndef judge_clauses(path, name, clauses, fixed, note, raw):\n    \"\"\"clauses: [(op, version)] from a PEP 440 specifier. Fail closed: only an\n    exact pin can be FIXED, and a bound that provably excludes the fix is\n    VULNERABLE; everything else is REVIEW.\"\"\"\n    if fixed is None:\n        add(\"REVIEW\", path, name, raw, note or \"no fixed release yet\")\n        return\n    exact = [v for op, v in clauses if op in (\"==\", \"===\") and \"*\" not in v]\n    if exact:\n        judge_threshold(path, name, exact[0], fixed, note)\n        return\n    floor = [vtuple(v) for op, v in clauses if op in (\">=\", \">\", \"~=\") and vtuple(v)]\n    if any(pad(t, 3) >= fixed for t in floor) and not any(PRERELEASE.search(v) for _, v in clauses):\n        add(\"FIXED\", path, name, raw, \"every version the specifier allows is at or past the fix. \" + note)\n        return\n    for op, v in clauses:\n        t = vtuple(v.replace(\".*\", \"\"))\n        if t is None:\n            continue\n        if (op == \"<\" and pad(t, 3) <= fixed) or (op == \"<=\" and pad(t, 3) < fixed) \\\n                or (op == \"==\" and \"*\" in v and t < fixed[:len(t)]) \\\n                or (op == \"~=\" and len(t) > 1 and t[:-1] < fixed[:len(t) - 1]):\n            add(\"VULNERABLE\", path, name, raw, \"the specifier excludes the fix %s. %s\" % (dotted(fixed), note))\n            return\n    add(\"REVIEW\", path, name, raw or \"(unpinned)\",\n        \"not pinned; the version is whatever resolved at build time. Check the lockfile or deployed environment\")\n\n\n# Python packages that load certifi's bundle: a manifest that uses one without\n# pinning certifi gets whatever certifi resolved at install time.\nCERTIFI_CONSUMERS = {\"requests\", \"httpx\", \"boto3\", \"botocore\", \"aiohttp\", \"google-auth\", \"openai\", \"anthropic\",\n                     \"urllib3\", \"grpcio\", \"pip-system-certs\", \"httplib2\", \"elasticsearch\", \"snowflake-connector-python\"}\n\n\ndef note_python_name(path, name):\n    d = os.path.dirname(path)\n    if name == \"certifi\":\n        certifi_pinned.add(d)\n    elif name in CERTIFI_CONSUMERS:\n        py_consumers.setdefault(d, (path, set()))[1].add(name)\n\n\nWHEEL = re.compile(r\"(?:^|/)([A-Za-z0-9][A-Za-z0-9._]*?)-(\\d[\\w.!+]*?)(?:-py\\d|-cp\\d|-\\d+-|\\.tar\\.gz|\\.zip|\\.tar\\.bz2)\", re.I)\n\n\ndef judge_url_requirement(path, url):\n    \"\"\"A requirement given as a wheel or sdist URL: judged by its file name.\"\"\"\n    m = WHEEL.search(url.split(\"#\", 1)[0].split(\"?\", 1)[0])\n    if not m or norm(m.group(1)) not in PY_PACKAGES:\n        return False\n    name = norm(m.group(1))\n    note_python_name(path, name)\n    fixed, note = PY_PACKAGES[name]\n    judge_threshold(path, name, m.group(2), fixed, note)\n    return True\n\n\ndef judge_requirement(path, req):\n    \"\"\"One PEP 508 requirement string. Returns True if it named a tracked package.\"\"\"\n    if re.match(r\"\\s*(?:https?|file)://\", req):\n        return judge_url_requirement(path, req.strip())\n    m = REQ_NAME.match(req)\n    if not m:\n        return False\n    name = norm(m.group(1))\n    note_python_name(path, name)\n    if name not in PY_PACKAGES:\n        return False\n    fixed, note = PY_PACKAGES[name]\n    rest = m.group(3).split(\";\", 1)[0].strip()\n    if rest.startswith(\"@\"):\n        if not judge_url_requirement(path, rest[1:].strip()):\n            add(\"REVIEW\", path, name, rest, \"installed from a URL or path; check what it resolves to\")\n        return True\n    rest = rest.strip(\"()\").strip()\n    clauses = []\n    for part in [p for p in rest.split(\",\") if p.strip()]:\n        c = CLAUSE.match(part)\n        if not c:\n            add(\"REVIEW\", path, name, rest, \"a specifier this scanner cannot read; check the resolved version\")\n            return True\n        clauses.append((c.group(1), c.group(2)))\n    judge_clauses(path, name, clauses, fixed, note, rest)\n    return True\n\n\ndef poetry_clauses(spec):\n    \"\"\"Poetry's constraint syntax as PEP 440 clauses, or None if unreadable.\"\"\"\n    out = []\n    for part in [p.strip() for p in re.split(r\",|\\s+(?=[<>=!~^])\", spec) if p.strip()]:\n        if part == \"*\":\n            continue\n        if part.startswith(\"^\") or (part.startswith(\"~\") and not part.startswith(\"~=\")):\n            t = vtuple(part.lstrip(\"^~\"))\n            if t is None:\n                return None\n            if part.startswith(\"^\"):\n                i = next((k for k, x in enumerate(t) if x), len(t) - 1)\n            else:\n                i = 1 if len(t) > 1 else 0\n            out += [(\">=\", dotted(t)), (\"<\", dotted(t[:i] + (t[i] + 1,)))]\n        elif re.match(r\"\\d\", part):\n            out.append((\"==\", part))\n        else:\n            c = CLAUSE.match(part)\n            if not c:\n                return None\n            out.append((c.group(1), c.group(2)))\n    return out\n\n\ndef judge_poetry(path, name, spec):\n    name = norm(name)\n    note_python_name(path, name)\n    if name not in PY_PACKAGES:\n        return\n    if isinstance(spec, list):\n        for s in spec:\n            judge_poetry(path, name, s)\n        return\n    if isinstance(spec, dict):\n        if \"version\" not in spec:\n            add(\"REVIEW\", path, name, json.dumps(spec)[:60], \"installed from a git/path/url source; check what it resolves to\")\n            return\n        spec = spec[\"version\"]\n    fixed, note = PY_PACKAGES[name]\n    clauses = poetry_clauses(str(spec))\n    if clauses is None:\n        add(\"REVIEW\", path, name, spec, \"a constraint this scanner cannot read; check the lockfile\")\n    else:\n        judge_clauses(path, name, clauses, fixed, note, spec)\n\n\n# ---------------------------------------------------------------- shell commands\n\ndef commands(text):\n    \"\"\"Simple commands in a shell snippet, as token lists, split on ; && || |\n    and newlines. Leading VAR=value assignments and sudo/exec/env are dropped.\"\"\"\n    out = []\n    for chunk in re.sub(r\"\\\\\\r?\\n\", \" \", text).splitlines():\n        try:\n            lex = shlex.shlex(chunk, posix=True, punctuation_chars=True)\n            lex.whitespace_split = True\n            lex.commenters = \"#\"\n            toks = list(lex)\n        except ValueError:\n            toks = chunk.split()  # unbalanced quotes; still worth reading\n        cur = []\n        for t in toks + [\";\"]:\n            if t and set(t) <= set(\";&|()\"):\n                while cur and (re.match(r\"^[A-Za-z_][A-Za-z0-9_]*=\", cur[0]) or cur[0] in (\"sudo\", \"exec\", \"time\", \"env\")):\n                    cur = cur[1:]\n                if cur:\n                    out.append(cur)\n                cur = []\n            else:\n                cur.append(t)\n    return out\n\n\nPIP_VALUE_OPTS = {\"-r\", \"-c\", \"--requirement\", \"--constraint\", \"-i\", \"--index-url\", \"--extra-index-url\", \"--cert\",\n                  \"--trusted-host\", \"-f\", \"--find-links\", \"--target\", \"-t\", \"--prefix\", \"--root\", \"--python\", \"-p\"}\n\n\ndef scan_shell(path, text, where=\"script\"):\n    \"\"\"Commands that pin or embed something. Returns facts the caller may use.\"\"\"\n    facts = set()\n    for cmd in commands(text):\n        prog, args = os.path.basename(cmd[0]), cmd[1:]\n        runner = prog in (\"npx\", \"pnpm\", \"yarn\", \"bunx\", \"npm\") and args[:1] and args[0] != \"exec\"\n        if prog == \"bun\" and args[:1] == [\"build\"] and \"--compile\" in args:\n            add(\"REVIEW\", path, \"bun-compiled binary\", where, BUN_COMPILED)\n        elif prog == \"deno\" and args[:1] == [\"compile\"]:\n            add(\"REVIEW\", path, \"deno-compiled binary\", where, EMBEDS_RUNTIME)\n        elif prog in (\"pkg\", \"nexe\", \"postject\") or (runner and args[0] in (\"pkg\", \"nexe\", \"@yao-pkg/pkg\", \"postject\")):\n            add(\"REVIEW\", path, \"node single-executable (%s)\" % (args[0] if runner else prog), where, EMBEDS_RUNTIME)\n        elif prog == \"node\" and any(a.startswith(\"--experimental-sea-config\") for a in args):\n            add(\"REVIEW\", path, \"node single-executable\", where, EMBEDS_RUNTIME)\n        scan_version_managers(path, prog, args)\n        pip_args = None\n        if re.match(r\"pip(?:3(?:\\.\\d+)?)?$\", prog):\n            pip_args = args\n        elif re.match(r\"python(?:\\d(?:\\.\\d+)?)?$\", prog) and args[:2] == [\"-m\", \"pip\"]:\n            pip_args = args[2:]\n        elif prog == \"uv\" and args[:1] in ([\"pip\"], [\"tool\"]):\n            pip_args = args[1:]\n        elif prog == \"pipx\":\n            pip_args = args\n        if not pip_args or pip_args[0] not in (\"install\", \"add\", \"inject\"):\n            continue\n        rest = pip_args[1:]\n        upgrade = any(a in (\"-U\", \"--upgrade\") or re.match(r\"^-[a-zA-Z]*U[a-zA-Z]*$\", a) for a in rest)\n        skip = False\n        for a in rest:\n            if skip:\n                skip = False\n                continue\n            if a in PIP_VALUE_OPTS:\n                skip = True\n                facts |= {\"pip_cert\"} if a == \"--cert\" else set()\n                continue\n            if a.startswith(\"-\"):\n                continue\n            req = REQ_NAME.match(a)\n            if req and norm(req.group(1)) == \"pip\" and (upgrade or \"=\" in a):\n                facts.add(\"pip_upgraded\")\n            judge_requirement(path, a)\n    return facts\n\n\ndef positional(args):\n    return [a for a in args if not a.startswith(\"-\")]\n\n\ndef judge_spec(path, spec, source):\n    \"\"\"'node@22.1.0', 'nodejs 22', 'bun@1.4.4': route to the right judge.\"\"\"\n    tool, _, ver = spec.partition(\"@\")\n    judge_tool_any(path, tool, ver or \"\", source)\n\n\ndef judge_tool_any(path, tool, ver, source):\n    tool = tool.lower()\n    if tool in (\"node\", \"nodejs\"):\n        judge_node(path, ver, source)\n    elif tool == \"bun\":\n        judge_bun(path, ver, source)\n    elif tool == \"deno\":\n        judge_deno(path, ver, source)\n    elif tool in (\"go\", \"golang\"):\n        judge_go(path, ver, source)\n\n\ndef scan_version_managers(path, prog, args):\n    \"\"\"Runtimes installed by a version manager or a global package install.\"\"\"\n    pos = positional(args)\n    if prog in (\"nvm\", \"fnm\", \"n\", \"nodenv\") and pos[:1] in ([\"install\"], [\"use\"]):\n        judge_node(path, pos[1] if len(pos) > 1 else \"\", prog)\n    elif prog == \"n\" and pos and re.match(r\"v?\\d|lts|latest|current\", pos[0]):\n        judge_node(path, pos[0], \"n\")\n    elif prog == \"volta\" and pos[:1] in ([\"install\"], [\"pin\"]):\n        for spec in pos[1:]:\n            judge_spec(path, spec, \"volta\")\n    elif prog in (\"asdf\", \"mise\", \"rtx\") and pos[:1] in ([\"install\"], [\"use\"], [\"global\"], [\"local\"], [\"set\"]):\n        rest = pos[1:]\n        if rest and \"@\" in rest[0]:\n            for spec in rest:\n                judge_spec(path, spec, prog)\n        elif len(rest) >= 2:\n            judge_tool_any(path, rest[0], rest[1], prog)\n    elif prog in (\"npm\", \"pnpm\", \"yarn\", \"bun\") and pos[:1] in ([\"install\"], [\"i\"], [\"add\"]) \\\n            and (\"-g\" in args or \"--global\" in args or prog == \"yarn\" and \"global\" in args):\n        for spec in pos[1:]:\n            name, _, ver = spec.rpartition(\"@\") if spec.count(\"@\") > (1 if spec.startswith(\"@\") else 0) else (spec, \"\", \"\")\n            if name == \"bun\":\n                judge_bun(path, ver, \"global install\")\n            elif name in (\"pnpm\", \"@pnpm/exe\"):\n                add(\"REVIEW\", path, \"pnpm (global install)\", ver, PNPM_NOTE)\n\n\nPNPM_NOTE = (\"the standalone pnpm (@pnpm/exe, get.pnpm.io) embeds its own Node, which ignores the system one; \"\n             \"check `pnpm --version` against a build on a fixed Node, or install pnpm from npm on a fixed Node\")\n\ndef on_line(rx, line):\n    m = re.search(rx, line)\n    return m.group(1) if m else \"\"\n\n\n# Installers that fetch whatever is current, or a version given on the line.\nINSTALLERS = [\n    (re.compile(r\"(?:deb|rpm)\\.nodesource\\.com/setup_(\\d+)\\.x\"), lambda p, m, line: judge_node(p, m.group(1), \"nodesource\")),\n    (re.compile(r\"(?:deb|rpm)\\.nodesource\\.com/setup_(lts|current)\\.x\"), lambda p, m, line: judge_node(p, m.group(1), \"nodesource\")),\n    (re.compile(r\"bun\\.sh/install\"), lambda p, m, line: judge_bun(p, on_line(r\"bun-v(\\d[\\w.]*)\", line), \"bun.sh/install\")),\n    (re.compile(r\"astral\\.sh/uv/install\\.(?:sh|ps1)\"), lambda p, m, line: judge_uv(p, \"\", \"unversioned install script\")),\n    (re.compile(r\"deno\\.land/(?:x/)?install\"), lambda p, m, line: judge_deno(p, on_line(r\"\\bv(\\d+\\.\\d+\\.\\d+)\\b\", line),\n                                                                            \"install script\")),\n    (re.compile(r\"get\\.pnpm\\.io/install\"), lambda p, m, line: add(\"REVIEW\", p, \"pnpm (standalone installer)\", \"\", PNPM_NOTE)),\n    (re.compile(r\"\\b(?:curl|wget)\\b[^|]*://[^|]*\\|\\s*(?:sudo\\s+)?(?:ba|z)?sh\\b\"),\n     lambda p, m, line: add(\"REVIEW\", p, \"script piped to a shell\", line.strip()[:120],\n                            \"fetched and run at build time: check which runtimes and binaries it installs, at which versions\")),\n    (re.compile(r\"releases\\.hashicorp\\.com/|github\\.com/[^/\\s]+/[^/\\s]+/releases/download/\"),\n     lambda p, m, line: add(\"REVIEW\", p, \"binary downloaded at build time\", line.strip()[:120],\n                            \"if it is Go-built (most CLIs are), it carries its own crypto/x509: check the version \"\n                            \"against a build on Go >= 1.26.10 / 1.27.3, or run go_binaries.py on the image\")),\n    (re.compile(r\"raw\\.githubusercontent\\.com/nvm-sh/nvm/|fnm\\.vercel\\.app/install|get\\.volta\\.sh\"),\n     lambda p, m, line: add(\"REVIEW\", p, \"node version manager\", \"\",\n                            \"installs Node versions on demand and keeps old ones: probe and remove every installed Node\")),\n]\n\n\ndef scan_installers(path, text):\n    for line in text.splitlines():\n        if \"://\" not in line and \"nodesource\" not in line:\n            continue\n        for rx, judge in INSTALLERS:\n            m = rx.search(line)\n            if m:\n                judge(path, m, line)\n\n\n# ---------------------------------------------------------------- images\n\nIMAGE_RULES = [\n    (re.compile(r\"(?:^|/)node:(.+)$\"), lambda p, t: judge_node(p, t, \"image tag\")),\n    (re.compile(r\"(?:^|/)golang:(.+)$\"), lambda p, t: judge_go(p, t, \"image tag\")),\n    (re.compile(r\"(?:^|/)(?:eclipse-temurin|openjdk|amazoncorretto|ibm-semeru-runtimes|sapmachine|azul/zulu-openjdk[^:]*):(.+)$\"),\n     lambda p, t: judge_java(p, java_image_tag(t), \"image tag\")),\n    (re.compile(r\"(?:^|/)(?:maven|gradle):(.+)$\"),\n     lambda p, t: judge_java(p, java_image_tag(t, build_tool=True), \"image tag\") if java_image_tag(t, build_tool=True)\n     else add(\"REVIEW\", p, \"java runtime (image tag)\", t, \"the tag names no JDK; check the JDK in the deployed image\")),\n    (re.compile(r\"(?:^|/)denoland/deno:(?:[a-z]+-)?(.+)$\"), lambda p, t: judge_deno(p, t, \"image tag\")),\n    (re.compile(r\"(?:^|/)astral-sh/uv:(.+)$\"), lambda p, t: judge_uv(p, t, \"image tag\")),\n    (re.compile(r\"(?:^|/)dotnet/(?:sdk|aspnet|runtime|runtime-deps):(.+)$\"), lambda p, t: add(\"REVIEW\", p, \".NET (image tag)\", t,\n        \".NET trusts the image's OS store; rebuild on a base published after 2026-10-20\")),\n    (re.compile(r\"(?:^|/)(?:continuumio/(?:mini|ana)conda3?|condaforge/(?:miniforge3|mambaforge)|mambaorg/micromamba):(.+)$\"),\n     lambda p, t: add(\"REVIEW\", p, \"conda (image tag)\", t,\n        \"conda envs use their own ca-certificates and certifi, not the OS store; update both in the image\")),\n    (re.compile(r\"(?:^|/)oven/bun:(.+)$\"), lambda p, t: judge_bun(p, re.sub(r\"^(?:canary|latest)\\b.*\", \"\", t) or t, \"image tag\")),\n]\n\n\nGO_TOOL_IMAGE = re.compile(\n    r\"(?:^|/)(?:docker|hashicorp/[\\w-]+|otel/[\\w-]+|datadog/agent|datadoghq/agent|traefik|caddy|prom/[\\w-]+\"\n    r\"|grafana/(?:agent|alloy|loki|tempo|mimir)|bitnami/kubectl|alpine/helm|amazon/aws-otel-collector)$\")\n\n\ndef judge_image(path, image, where, base=True):\n    image = str(image).strip().strip(\"\\\"'\")\n    if not image or image.lower() == \"scratch\":\n        return\n    if \"$\" in image or \"{{\" in image:\n        add(\"REVIEW\", path, \"image (%s)\" % where, image,\n            \"the image comes from a variable or template; check what the build or deploy actually uses\")\n        return\n    ref = image.split(\"@\", 1)[0]\n    name = ref.split(\":\")[0].lower()\n    if GO_TOOL_IMAGE.search(name):  # also when a binary is copied out with COPY --from\n        add(\"REVIEW\", path, \"Go-built image (%s)\" % where, image,\n            \"the program in this image carries its own crypto/x509, so --pull does not help: bump to a release \"\n            \"built on Go >= 1.26.10 / 1.27.3 (Datadog Agent 7.84.5+) and check it with go_binaries.py --root\")\n    elif base:\n        add(\"REVIEW\", path, \"base image (%s)\" % where, image,\n            \"pinned by digest: it will not pick up a patched ca-certificates until the digest is bumped\" if \"@sha256:\" in image\n            else \"rebuild with --pull --no-cache so the ca-certificates layer is refreshed, then verify the deployed image\")\n    if \":\" in ref.split(\"/\")[-1]:\n        for rx, judge in IMAGE_RULES:\n            m = rx.search(ref)\n            if m:\n                judge(path, m.group(1))\n                break\n\n\n# ---------------------------------------------------------------- Dockerfile\n\nHEREDOC = re.compile(r\"(?= len(lines):\n                if problems is not None:\n                    problems.append(\"heredoc <<%s from line %d is never closed\" % (tag, start))\n                i = start  # read what follows as instructions rather than lose it\n                break\n            i += 1\n            cur += \"\\n\" + \"\\n\".join(body)\n        parts = cur.split(None, 1)\n        out.append((parts[0].upper(), parts[1] if len(parts) > 1 else \"\"))\n        cur = \"\"\n    if cur.strip():\n        parts = cur.split(None, 1)\n        out.append((parts[0].upper(), parts[1] if len(parts) > 1 else \"\"))\n    return out\n\n\ndef substitute(value, env):\n    def one(m):\n        name, default = m.group(1) or m.group(3), m.group(2)\n        if env.get(name):\n            return env[name]\n        return default if default is not None else m.group(0)\n    return re.sub(r\"\\$\\{([A-Za-z_][A-Za-z0-9_]*)(?::?-([^}]*))?\\}|\\$([A-Za-z_][A-Za-z0-9_]*)\", one, value)\n\n\ndef exec_or_shell(args):\n    s = args.strip()\n    if s.startswith(\"[\"):\n        try:\n            return \" \".join(shlex.quote(str(x)) for x in json.loads(s))\n        except ValueError:\n            pass\n    return s\n\n\nVERSION_VAR = re.compile(r\"^([A-Za-z][A-Za-z0-9_]*?)_(?:VERSION|VER)$\")\nVERSION_VAR_TOOLS = {\"node\": \"node\", \"nodejs\": \"node\", \"go\": \"go\", \"golang\": \"go\", \"bun\": \"bun\", \"deno\": \"deno\",\n                     \"java\": \"java\", \"jdk\": \"java\", \"uv\": \"uv\", \"pixi\": \"pixi\", \"mise\": \"mise\",\n                     \"claude_code\": \"claude-code\", \"claude\": \"claude-code\"}\n\n\ndef scan_version_vars(path, pairs, source):\n    \"\"\"NODE_VERSION=22.1.0, CLAUDE_CODE_VERSION=2.1.239 and the like, in ARG,\n    ENV and env files: a pin that an install command reads later.\"\"\"\n    for k, v in pairs:\n        m = VERSION_VAR.match(k.strip())\n        v = str(v).strip().strip(\"\\\"'\")\n        if not m or not v or \"$\" in v:\n            continue\n        name = m.group(1).lower()\n        tool = VERSION_VAR_TOOLS.get(name) or (name.replace(\"_\", \"-\") if name.replace(\"_\", \"-\") in GO_CLIS else None)\n        if tool:\n            judge_tool(path, tool, v.lstrip(\"v\"))\n\n\ndef scan_env_file(path, text):\n    parsed(\"env file\")\n    pairs = []\n    for line in text.splitlines():\n        m = re.match(r\"\\s*(?:export\\s+)?([A-Za-z_][A-Za-z0-9_]*)\\s*=\\s*(.*)$\", line)\n        if m:\n            pairs.append((m.group(1), m.group(2).split(\" #\")[0]))\n    scan_version_vars(path, pairs, \"env file\")\n\n\ndef scan_dockerfile(path, text):\n    parsed(\"Dockerfile\")\n    env, stages, python_image, facts, problems = {}, set(), False, set(), []\n    instructions = dockerfile_instructions(text, problems)\n    for problem in problems:\n        add(\"ERROR\", path, \"Dockerfile\", \"\", problem)\n    for kw, args in instructions:\n        if kw == \"ARG\":\n            for tok in split_words(args):\n                k, _, v = tok.partition(\"=\")\n                env.setdefault(k, v)\n                scan_version_vars(path, [(k, v)], \"ARG\")\n        elif kw == \"ENV\":\n            words = split_words(args)\n            pairs = [w.partition(\"=\") for w in words] if words and \"=\" in words[0] else \\\n                [(words[0], \"=\", \" \".join(words[1:]))] if words else []\n            for k, _, v in pairs:\n                env[k] = substitute(v, env)\n                scan_version_vars(path, [(k, env[k])], \"ENV\")\n                if k == \"PIP_CERT\":\n                    facts.add(\"pip_cert\")\n        elif kw == \"FROM\":\n            toks = [t for t in substitute(args, env).split() if not t.startswith(\"--\")]\n            if not toks:\n                add(\"ERROR\", path, \"FROM\", args, \"a FROM with no image\")\n                continue\n            image = toks[0]\n            if len(toks) >= 3 and toks[1].lower() == \"as\":\n                stages.add(toks[2].lower())\n            if image.lower() in stages:\n                continue\n            judge_image(path, image, \"FROM\")\n            if image.split(\"@\")[0].split(\"/\")[-1].split(\":\")[0].lower() in (\"python\", \"pypy\"):\n                python_image = True\n        elif kw in (\"COPY\", \"ADD\"):\n            for tok in args.split():\n                if tok.startswith(\"--from=\"):\n                    src = substitute(tok[7:], env)\n                    if src.lower() not in stages and not src.isdigit():\n                        judge_image(path, src, \"COPY --from\", base=False)\n        elif kw == \"RUN\":\n            facts |= scan_shell(path, substitute(exec_or_shell(re.sub(r\"^(?:--\\S+\\s+)*\", \"\", args)), env), \"RUN\")\n    if python_image and \"pip_upgraded\" not in facts:\n        add(\"REVIEW\", path, \"pip in image\", \"\",\n            \"official python images shipped an old pip as of 2026-10-21 (python:3.12-slim: pip 25.0.1, certifi \"\n            \"2024.08.30); upgrade pip>=26.2.2 and certifi early in the build. PIP_CERT alone does not fix an old pip\")\n\n\n# ---------------------------------------------------------------- YAML\n\nif yaml is not None:\n    class AnyTagLoader(yaml.SafeLoader):\n        \"\"\"SafeLoader that reads unknown tags (!Ref, !reference) as plain data.\"\"\"\n\n    def _any_tag(loader, suffix, node):\n        if isinstance(node, yaml.MappingNode):\n            return loader.construct_mapping(node)\n        if isinstance(node, yaml.SequenceNode):\n            return loader.construct_sequence(node)\n        return loader.construct_scalar(node)\n\n    AnyTagLoader.add_multi_constructor(\"!\", _any_tag)\n    AnyTagLoader.add_multi_constructor(\"tag:\", _any_tag)\n\n\ndef judge_setup_node_cached(path, version):\n    \"\"\"setup-node without check-latest: a floating version takes the runner's\n    cached Node, which was 24.21.0 on the hosted images.\"\"\"\n    v = vtuple(version)\n    if v is not None and len(v) < 3 and v[0] in NODE_FIXED:\n        add(\"VULNERABLE\", path, \"node (setup-node)\", version,\n            \"a floating version without check-latest: true takes the runner's cached Node (24.21.0 on the hosted \"\n            \"images); pin %s or set check-latest\" % dotted(NODE_FIXED[v[0]]))\n    elif v is None and re.match(r\"\\s*(?:lts|node|latest|current)\", str(version), re.I):\n        add(\"VULNERABLE\", path, \"node (setup-node)\", version,\n            \"an alias without check-latest: true takes the runner's cached Node; pin an exact fixed version\")\n    else:\n        judge_node(path, version, \"setup-node\")\n\n\nSETUP_ACTIONS = {\n    \"actions/setup-node\": (\"node-version\", lambda p, v: judge_node(p, v, \"setup-node\")),\n    \"actions/setup-go\": (\"go-version\", lambda p, v: judge_go(p, v, \"setup-go\")),\n    \"actions/setup-java\": (\"java-version\", lambda p, v: judge_java(p, v, \"setup-java\")),\n    \"oven-sh/setup-bun\": (\"bun-version\", lambda p, v: judge_bun(p, v, \"setup-bun\")),\n    \"denoland/setup-deno\": (\"deno-version\", lambda p, v: judge_deno(p, v, \"setup-deno\")),\n    \"astral-sh/setup-uv\": (\"version\", lambda p, v: judge_uv(p, v, \"setup-uv\")),\n}\nVERSION_KEYS = {key: judge for key, judge in SETUP_ACTIONS.values() if key != \"version\"}\nSHELL_KEYS = {\"run\", \"script\", \"before_script\", \"after_script\", \"command\", \"cmd\", \"entrypoint\", \"args\"}\n\n\ndef scalars(v):\n    if isinstance(v, list):\n        for x in v:\n            yield from scalars(x)\n    elif v is not None and not isinstance(v, dict):\n        yield str(v)\n\n\ndef resolve_expr(value, matrix):\n    \"\"\"Values of '${{ matrix.X }}' from the job's matrix, or None.\"\"\"\n    m = re.fullmatch(r\"\\$\\{\\{\\s*matrix\\.([A-Za-z0-9_-]+)\\s*\\}\\}\", value.strip())\n    if not m or not isinstance(matrix, dict):\n        return None\n    key = m.group(1)\n    vals = list(scalars(matrix.get(key)))\n    for inc in matrix.get(\"include\") or []:\n        if isinstance(inc, dict) and key in inc:\n            vals += list(scalars(inc[key]))\n    return vals or None\n\n\ndef judge_version_values(path, key, judge, value, matrix):\n    for v in scalars(value):\n        if \"${{\" in v:\n            got = resolve_expr(v, matrix)\n            if got is None:\n                add(\"REVIEW\", path, key, v, \"an expression this scanner cannot resolve; check each value it takes\")\n            for x in got or []:\n                judge(path, x)\n        elif v.strip():\n            judge(path, v.strip())\n\n\ndef walk_yaml(path, node, workflow, matrix=None):\n    if isinstance(node, list):\n        for x in node:\n            walk_yaml(path, x, workflow, matrix)\n        return\n    if not isinstance(node, dict):\n        return\n    base = os.path.basename(path).lower()\n    cloudbuild = base.startswith(\"cloudbuild\")\n    travis = base == \".travis.yml\"\n    if workflow and isinstance(node.get(\"strategy\"), dict) and \"matrix\" in node[\"strategy\"]:\n        matrix = node[\"strategy\"][\"matrix\"]\n        if isinstance(matrix, str):\n            add(\"REVIEW\", path, \"matrix\", matrix, \"a computed matrix; check each value it takes\")\n    uses = node.get(\"uses\")\n    if workflow and isinstance(uses, str):\n        action = uses.split(\"@\", 1)[0].lower()\n        with_ = node.get(\"with\") if isinstance(node.get(\"with\"), dict) else {}\n        if action in SETUP_ACTIONS:\n            key, judge = SETUP_ACTIONS[action]\n            if action == \"actions/setup-node\" and str(with_.get(\"check-latest\", \"\")).lower() != \"true\":\n                judge = judge_setup_node_cached\n            files = [k for k in with_ if str(k).endswith(\"-file\")]\n            if key in with_:\n                judge_version_values(path, key, judge, with_[key], matrix)\n            elif files:\n                add(\"INFO\", path, files[0], with_[files[0]], \"version comes from that file, scanned separately\")\n            else:\n                add(\"REVIEW\", path, action, \"(no version)\",\n                    \"no version given: the action uses the runner's copy or the latest; check what ran\")\n        elif action in GO_CLI_ACTIONS:\n            add(\"REVIEW\", path, action, with_.get(\"version\", \"\"), GO_CLI_NOTE)\n        elif uses.startswith(\"docker://\"):\n            judge_image(path, uses[9:], \"uses docker://\")\n    for k, v in node.items():\n        k = str(k)\n        if k == \"image\" or (workflow and k == \"container\" and isinstance(v, str)):\n            if isinstance(v, dict):\n                v = v.get(\"name\")\n            if isinstance(v, str):\n                judge_image(path, v, \"yaml %s\" % k)\n        elif k == \"services\" and isinstance(v, list):\n            for s in v:\n                if isinstance(s, dict):\n                    s = s.get(\"name\") or s.get(\"image\")\n                if isinstance(s, str):\n                    judge_image(path, s, \"yaml services\")\n        elif k == \"steps\" and isinstance(v, list) and cloudbuild:\n            for step in v:\n                if isinstance(step, dict) and isinstance(step.get(\"name\"), str):\n                    judge_image(path, step[\"name\"], \"cloudbuild step\")\n        elif k == \"task\" and isinstance(v, str) and isinstance(node.get(\"inputs\"), dict):\n            inputs = node[\"inputs\"]\n            task = v.split(\"@\", 1)[0].lower()\n            if task in (\"nodetool\", \"usenode\"):\n                judge_version_values(path, \"NodeTool\", lambda p, x: judge_node(p, x, \"azure NodeTool\"),\n                                     inputs.get(\"versionSpec\") or inputs.get(\"version\") or \"\", matrix)\n            elif task == \"gotool\":\n                judge_version_values(path, \"GoTool\", lambda p, x: judge_go(p, x, \"azure GoTool\"),\n                                     inputs.get(\"version\") or \"\", matrix)\n            elif task == \"javatoolinstaller\":\n                judge_version_values(path, \"JavaToolInstaller\", lambda p, x: judge_java(p, x, \"azure JavaToolInstaller\"),\n                                     inputs.get(\"versionSpec\") or \"\", matrix)\n        elif k == \"runtime-versions\" and isinstance(v, dict):\n            for tool, ver in v.items():\n                judge_tool_any(path, {\"nodejs\": \"node\", \"golang\": \"go\"}.get(str(tool), str(tool)), str(ver), \"codebuild\")\n                if str(tool) in (\"java\", \"corretto\"):\n                    judge_java(path, re.sub(r\"^\\D+\", \"\", str(ver)), \"codebuild\")\n        elif k == \"node_js\" and travis:\n            for x in scalars(v):\n                judge_node(path, x, \"travis\")\n        elif k in (\"go\",) and travis:\n            for x in scalars(v):\n                judge_go(path, x, \"travis\")\n        elif k in VERSION_KEYS and not isinstance(v, dict):\n            judge_version_values(path, k, VERSION_KEYS[k], v, matrix)\n        elif k == \"runs-on\" and \"self-hosted\" in json.dumps(v, default=str):\n            add(\"REVIEW\", path, \"self-hosted runner\", \"\",\n                \"the runner host's OS trust store, Node, JDK, pip and uv all need patching, not just the workflow\")\n        if k in SHELL_KEYS:\n            for s in scalars(v):\n                scan_shell(path, s, \"script\")\n        walk_yaml(path, v, workflow, matrix)\n\n\ndef iter_dicts(node):\n    if isinstance(node, dict):\n        yield node\n        for v in node.values():\n            yield from iter_dicts(v)\n    elif isinstance(node, list):\n        for v in node:\n            yield from iter_dicts(v)\n\n\ndef is_conda_env(doc):\n    deps = doc.get(\"dependencies\") if isinstance(doc, dict) else None\n    return isinstance(deps, list) and bool(deps) and all(\n        isinstance(d, str) or (isinstance(d, dict) and set(d) <= {\"pip\"}) for d in deps)\n\n\ndef scan_conda_env(path, doc):\n    parsed(\"conda env\")\n    pinned_ca = False\n    for d in doc[\"dependencies\"]:\n        if isinstance(d, dict):\n            for req in d.get(\"pip\") or []:\n                if isinstance(req, str):\n                    judge_requirement(path, req)\n            continue\n        m = re.match(r\"\\s*(?:[\\w.-]+::)?([A-Za-z0-9_.-]+)\\s*(.*)$\", d)\n        if not m or m.group(1).lower() not in (\"certifi\", \"ca-certificates\"):\n            continue\n        name, spec = m.group(1).lower(), m.group(2).strip()\n        pinned_ca |= name == \"ca-certificates\"\n        exact = re.match(r\"^(?:==?)?\\s*(\\d[\\w.]*)(?:[\\s=]\\S*)?$\", spec)\n        if spec and exact and not re.search(r\"[*<>!~,|]\", spec):\n            judge_conda(path, name, exact.group(1))\n        else:\n            add(\"REVIEW\", path, \"%s (conda)\" % name, spec or \"(unpinned)\",\n                \"not an exact pin; the env built from it decides. Check $CONDA_PREFIX/ssl/cacert.pem with trust_store.py\")\n    if not pinned_ca:\n        add(\"REVIEW\", path, \"conda env\", \"\",\n            \"conda installs its own ca-certificates and OpenSSL; rebuild the env (conda update ca-certificates certifi openssl) \"\n            \"and check $CONDA_PREFIX/ssl/cacert.pem with trust_store.py\")\n\n\ndef scan_conda_lock(path, doc):\n    parsed(\"conda lock\")\n    for node in iter_dicts(doc):\n        name = str(node.get(\"name\", \"\")).lower()\n        if name in (\"certifi\", \"ca-certificates\") and \"version\" in node:\n            judge_conda(path, name, str(node[\"version\"]))\n\n\ndef pnpm_key(k):\n    k = str(k).lstrip(\"/\").split(\"(\", 1)[0]\n    i = k.find(\"@\", 1)\n    if i > 0:\n        return k[:i], k[i + 1:]\n    if \"/\" in k:\n        name, _, ver = k.rpartition(\"/\")\n        return name, ver\n    return k, \"\"\n\n\ndef scan_pnpm_lock(full, path, doc):\n    parsed(\"pnpm-lock.yaml\")\n    found = False\n    for section in (\"packages\", \"snapshots\"):\n        for key in (doc.get(section) or {}):\n            name, ver = pnpm_key(key)\n            if name == \"electron\" or name.endswith(\"/electron\"):\n                judge_electron(path, ver)\n                found = True\n    importers = doc.get(\"importers\") or {\".\": doc}\n    for imp in importers.values():\n        for sec in (\"dependencies\", \"devDependencies\", \"optionalDependencies\"):\n            v = ((imp or {}).get(sec) or {}).get(\"electron\")\n            if v is not None:\n                judge_electron(path, str(v.get(\"version\") if isinstance(v, dict) else v).split(\"(\", 1)[0])\n                found = True\n    if found:\n        electron_resolved.add(os.path.dirname(full))\n\n\ndef lock_descriptor_name(d):\n    d = d.strip().strip('\"')\n    i = d.find(\"@\", 1)\n    return d[:i] if i > 0 else d\n\n\ndef scan_yarn_berry(full, path, doc):\n    parsed(\"yarn.lock\")\n    for key, info in doc.items():\n        if key != \"__metadata\" and isinstance(info, dict) and \\\n                any(lock_descriptor_name(d) == \"electron\" for d in str(key).split(\",\")):\n            judge_electron(path, info.get(\"version\", \"\"))\n            electron_resolved.add(os.path.dirname(full))\n\n\ndef scan_yaml_file(full, path, text, low):\n    unix = \"/\" + path.replace(os.sep, \"/\")\n    workflow = bool(re.search(r\"/\\.(?:github|gitea|forgejo)/workflows/|/\\.circleci/\", unix)) or low in (\n        \".gitlab-ci.yml\", \"action.yml\", \"action.yaml\", \"bitbucket-pipelines.yml\", \"azure-pipelines.yml\",\n        \".travis.yml\", \"buildspec.yml\", \"cloudbuild.yaml\", \"cloudbuild.yml\")\n    if yaml is None:\n        coverage[\"missing_parsers\"].setdefault(\"PyYAML\", []).append(path)\n        fallback_yaml(path, text)\n        return\n    try:\n        docs = list(yaml.load_all(text, Loader=AnyTagLoader))\n    except yaml.YAMLError as e:\n        if \"{{\" in text or \"{%\" in text:\n            add(\"REVIEW\", path, \"templated YAML\", \"\",\n                \"a template, so it cannot be parsed as YAML: render it (helm template, kustomize build) and scan the output\")\n        else:\n            add(\"ERROR\", path, \"YAML\", \"\", \"does not parse: %s\" % str(e).splitlines()[0])\n        fallback_yaml(path, text)\n        return\n    parsed(\"YAML\")\n    for doc in docs:\n        if low == \"pnpm-lock.yaml\" and isinstance(doc, dict):\n            scan_pnpm_lock(full, path, doc)\n            continue\n        if low == \"yarn.lock\" and isinstance(doc, dict):\n            scan_yarn_berry(full, path, doc)\n            continue\n        if low in (\"conda-lock.yml\", \"conda-lock.yaml\", \"pixi.lock\") or low.endswith(\".conda-lock.yml\"):\n            scan_conda_lock(path, doc)\n        elif is_conda_env(doc):\n            scan_conda_env(path, doc)\n        walk_yaml(path, doc, workflow)\n        if re.search(r\"/\\.github/workflows/\", unix) and isinstance(doc, dict):\n            check_hosted_runner(path, doc)\n\n\n# An upgrade counts only after a fresh package index: the hosted image's apt lists\n# predate the fixed package, so without `apt-get update` nothing changes.\nUPGRADE_CA = re.compile(r\"\\bapt(?:-get)?\\s+(?:-\\S+\\s+)*update\\b.*?\\bapt(?:-get)?\\s+(?:-\\S+\\s+)*(?:install|upgrade)\\b\"\n                        r\"(?![^\\n;&|]*--no-upgrade)[^\\n;&|]*\\bca-certificates(?![\\w.+-])\", re.S)\n\n\ndef runner_labels(job):\n    \"\"\"A job's runs-on labels, with ${{ matrix.X }} resolved from its own\n    matrix. None stands for a label that could not be resolved.\"\"\"\n    ro = job.get(\"runs-on\")\n    if isinstance(ro, dict):\n        ro = ro.get(\"labels\", ro.get(\"group\"))\n    strategy = job.get(\"strategy\")\n    matrix = strategy.get(\"matrix\") if isinstance(strategy, dict) else None\n    out = []\n    for v in ro if isinstance(ro, list) else [ro]:\n        if v is None:\n            continue\n        v = str(v).strip()\n        m = re.fullmatch(r\"\\$\\{\\{\\s*matrix\\.([\\w-]+)\\s*\\}\\}\", v)\n        if m and isinstance(matrix, dict):\n            k = m.group(1)\n            vals = matrix.get(k)\n            vals = list(vals) if isinstance(vals, list) else ([] if vals is None else [vals])\n            vals += [i[k] for i in matrix.get(\"include\") or [] if isinstance(i, dict) and k in i]\n            for x in vals or [None]:\n                if isinstance(x, list):\n                    out += [str(y) for y in x]\n                else:\n                    out.append(None if x is None or isinstance(x, dict) or \"${{\" in str(x) else str(x))\n        else:\n            out.append(None if \"${{\" in v else v)\n    return out\n\n\ndef check_hosted_runner(path, doc):\n    \"\"\"Hosted ubuntu runners shipped ca-certificates 20260601, which trusts the\n    emSign chains, until GitHub rebuilt them. Judged per job: only an upgrade\n    that is the job's own first step, on the host, counts.\"\"\"\n    jobs = doc.get(\"jobs\")\n    if not isinstance(jobs, dict):\n        return\n    for name, job in jobs.items():\n        if not isinstance(job, dict) or \"uses\" in job:  # a reusable workflow is judged where it is defined\n            continue\n        labels = runner_labels(job)\n        if None not in labels and not any(l.startswith(\"ubuntu-\") for l in labels):\n            continue\n        what = \"hosted runner (job %s)\" % name\n        shown = \", \".join(l or \"?\" for l in labels) or \"?\"\n        steps = [st for st in job.get(\"steps\") or [] if isinstance(st, dict)]\n        first = str(steps[0].get(\"run\", \"\")) if steps else \"\"\n        if \"container\" in job:\n            add(\"REVIEW\", path, what, shown,\n                \"a container job: its steps run in the container and cannot upgrade the host's ca-certificates, \"\n                \"which the runner uses to pull images and run JavaScript actions. Fix the container image, and \"\n                \"check the host side with probe_runtime.sh in a host step\")\n        elif UPGRADE_CA.search(first):\n            add(\"INFO\", path, what, shown, \"the first step upgrades ca-certificates\")\n        else:\n            add(\"REVIEW\", path, what, shown,\n                (\"runs-on could not be resolved to a label; if it can be a hosted ubuntu runner: \" if None in labels\n                 else \"\") +\n                \"hosted ubuntu images shipped ca-certificates 20260601 (accepts the 6 emSign chains) and \"\n                \"actions/checkout sends GITHUB_TOKEN over it: add `sudo apt-get update && sudo apt-get install -y \"\n                \"--only-upgrade ca-certificates` as the first step of this job. The runner's own Node, which runs \"\n                \"JavaScript actions, needs NODE_OPTIONS=--use-openssl-ca and \"\n                \"SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt in the job's env: where it exchanges credentials \"\n                \"(deployed-verification.md, CI/CD runners). Once GitHub's images ship the fixed ca-certificates, this row is answered and the step can go\")\n\n\ndef fallback_yaml(path, text):\n    \"\"\"Additive only, for YAML that could not be parsed: image lines, version keys, commands.\"\"\"\n    for m in re.finditer(r\"^\\s*-?\\s*(?:image|container):\\s*['\\\"]?([^\\s'\\\"#]+)\", text, re.M):\n        judge_image(path, m.group(1), \"yaml image (unparsed file)\")\n    for m in re.finditer(r\"\\b(node|go|java|bun|deno)-version:\\s*['\\\"]?([^\\s'\\\"#,\\]]+)\", text):\n        VERSION_KEYS[m.group(1) + \"-version\"](path, m.group(2))\n    scan_shell(path, text, \"script\")\n\n\n# ---------------------------------------------------------------- other formats\n\ndef loads_jsonc(text):\n    \"\"\"JSON with // and /* */ comments and trailing commas (bun.lock, global.json).\"\"\"\n    out, i, n, in_str = [], 0, len(text), False\n    while i < n:\n        c = text[i]\n        if in_str:\n            out.append(c)\n            if c == \"\\\\\" and i + 1 < n:\n                out.append(text[i + 1])\n                i += 1\n            elif c == '\"':\n                in_str = False\n        elif c == '\"':\n            in_str = True\n            out.append(c)\n        elif text.startswith(\"//\", i):\n            j = text.find(\"\\n\", i)\n            i = n if j < 0 else j\n            continue\n        elif text.startswith(\"/*\", i):\n            j = text.find(\"*/\", i + 2)\n            i = n if j < 0 else j + 2\n            continue\n        elif c == \",\":\n            j = i + 1\n            while j < n and text[j] in \" \\t\\r\\n\":\n                j += 1\n            if j >= n or text[j] not in \"}]\":\n                out.append(c)\n        else:\n            out.append(c)\n        i += 1\n    return json.loads(\"\".join(out))\n\n\ndef load_toml(path, text, kind):\n    if tomllib is None:\n        coverage[\"missing_parsers\"].setdefault(\"tomli (Python < 3.11)\", []).append(path)\n        return None\n    try:\n        data = tomllib.loads(text)\n    except Exception as e:  # tomllib.TOMLDecodeError, or tomli's\n        add(\"ERROR\", path, kind, \"\", \"does not parse as TOML: %s\" % e)\n        recognised[0] += 1\n        return None\n    parsed(kind)\n    return data\n\n\ndef load_json(path, text, kind, jsonc=False):\n    try:\n        data = loads_jsonc(text) if jsonc else json.loads(text)\n    except ValueError as e:\n        add(\"ERROR\", path, kind, \"\", \"does not parse as JSON: %s\" % e)\n        recognised[0] += 1\n        return None\n    parsed(kind)\n    return data\n\n\ndef scan_toml_lock(path, text, kind, table):\n    data = load_toml(path, text, kind)\n    if data is None:\n        return\n    for p in (data.get(\"package\") or []) + (data.get(\"packages\") or []):  # packages: pylock.toml\n        if not isinstance(p, dict) or \"name\" not in p:\n            continue\n        name, ver = norm(p[\"name\"]), str(p.get(\"version\", \"\"))\n        v = vtuple(ver)\n        if table is PY_PACKAGES:\n            note_python_name(path, name)\n        if table is PY_PACKAGES and name in PY_PACKAGES and not ver:\n            add(\"REVIEW\", path, name, \"\", \"locked without a version (a URL, path or VCS source); check what it resolves to\")\n        elif table is CARGO_PACKAGES and name == \"webpki-roots\" and v and v[:2] == (0, 26) and pad(v, 3) >= (0, 26, 8):\n            add(\"INFO\", path, name, ver, \"0.26.8+ re-exports webpki-roots 1.x; the 1.x entry decides\")\n        elif table is CARGO_PACKAGES and name == \"rustls-webpki\" and v and v[:2] > (0, 103):\n            add(\"REVIEW\", path, name, ver, NEWER)\n        elif name in table:\n            fixed, note = table[name]\n            judge_threshold(path, name, ver, fixed, note)\n\n\ndef scan_requirements(path, text):\n    parsed(\"requirements\")\n    for line in re.sub(r\"\\\\\\r?\\n\", \" \", text).splitlines():\n        line = re.sub(r\"(^|\\s)#.*$\", \"\", line).strip()\n        line = re.split(r\"\\s+--?[A-Za-z]\", line, maxsplit=1)[0]  # per-requirement options (--hash=...)\n        if line and not line.startswith(\"-\"):\n            judge_requirement(path, line)\n\n\ndef scan_pyproject(path, text):\n    data = load_toml(path, text, \"pyproject.toml\")\n    if data is None:\n        return\n    tool = data.get(\"tool\") or {}\n    uv = tool.get(\"uv\") or {}\n    if \"required-version\" in uv:\n        spec = str(uv[\"required-version\"]).strip()\n        # uv reads a bare version as ==.\n        judge_requirement(path, \"uv\" + (\"==\" if re.match(r\"\\d\", spec) else \"\") + spec)\n    project = data.get(\"project\") or {}\n    reqs = list(project.get(\"dependencies\") or [])\n    for group in (project.get(\"optional-dependencies\") or {}).values():\n        reqs += group or []\n    for group in (data.get(\"dependency-groups\") or {}).values():\n        reqs += group or []\n    reqs += (data.get(\"build-system\") or {}).get(\"requires\") or []\n    for group in ((tool.get(\"pdm\") or {}).get(\"dev-dependencies\") or {}).values():\n        reqs += group or []\n    reqs += uv.get(\"dev-dependencies\") or []\n    reqs += uv.get(\"override-dependencies\") or []\n    reqs += uv.get(\"constraint-dependencies\") or []\n    for r in reqs:\n        if isinstance(r, str):\n            judge_requirement(path, r)\n    poetry = tool.get(\"poetry\") or {}\n    tables = [poetry.get(\"dependencies\"), poetry.get(\"dev-dependencies\")]\n    tables += [g.get(\"dependencies\") for g in (poetry.get(\"group\") or {}).values() if isinstance(g, dict)]\n    for t in tables:\n        for name, spec in (t or {}).items():\n            judge_poetry(path, name, spec)\n\n\ndef scan_pipfile(path, text):\n    data = load_toml(path, text, \"Pipfile\")\n    if data is None:\n        return\n    for sec in (\"packages\", \"dev-packages\"):\n        for name, spec in (data.get(sec) or {}).items():\n            if norm(name) in PY_PACKAGES:\n                if isinstance(spec, dict):\n                    spec = spec.get(\"version\", \"@ (git/path source)\")\n                judge_requirement(path, name + (\"\" if spec == \"*\" else str(spec)))\n\n\ndef scan_pipfile_lock(path, text):\n    data = load_json(path, text, \"Pipfile.lock\")\n    if not isinstance(data, dict):\n        return\n    for section in (\"default\", \"develop\"):\n        for name, info in (data.get(section) or {}).items():\n            if isinstance(info, dict) and norm(name) in PY_PACKAGES:\n                judge_requirement(path, name + str(info.get(\"version\", \"\")))\n\n\ndef scan_setup_cfg(path, text):\n    cp = configparser.ConfigParser(interpolation=None)\n    try:\n        cp.read_string(text)\n    except configparser.Error as e:\n        add(\"ERROR\", path, \"setup.cfg\", \"\", \"does not parse: %s\" % str(e).splitlines()[0])\n        return\n    parsed(\"setup.cfg\")\n    values = []\n    if cp.has_section(\"options\"):\n        values += [cp.get(\"options\", k) for k in (\"install_requires\", \"setup_requires\") if cp.has_option(\"options\", k)]\n    if cp.has_section(\"options.extras_require\"):\n        values += [v for _, v in cp.items(\"options.extras_require\")]\n    for v in values:\n        for line in v.splitlines():\n            if line.strip():\n                judge_requirement(path, line.strip())\n\n\ndef scan_setup_py(path, text):\n    try:\n        tree = ast.parse(text)\n    except SyntaxError as e:\n        add(\"ERROR\", path, \"setup.py\", \"\", \"does not parse: %s\" % e)\n        return\n    parsed(\"setup.py\")\n    for node in ast.walk(tree):\n        if isinstance(node, ast.Constant) and isinstance(node.value, str):\n            judge_requirement(path, node.value)\n\n\ndef scan_package_json(full, path, text):\n    data = load_json(path, text, \"package.json\")\n    if not isinstance(data, dict):\n        return\n    package_jsons.append(path)\n    engines = data.get(\"engines\") or {}\n    if engines.get(\"node\"):\n        node_seen[0] = True\n        add(\"REVIEW\", path, \"node (engines)\", engines[\"node\"],\n            \"a range, not the runtime; check what CI and production actually run. Hosting platforms read it to pick \"\n            \"a major only (Vercel, Netlify) and run whatever patch they have, so probe the deployed runtime\")\n    if engines.get(\"bun\"):\n        add(\"REVIEW\", path, \"bun (engines)\", engines[\"bun\"], \"a range, not the runtime; check what CI and production run (fixed in 1.4.4)\")\n    volta = data.get(\"volta\") or {}\n    if volta.get(\"node\"):\n        judge_node(path, volta[\"node\"], \"volta\")\n    if volta.get(\"bun\"):\n        judge_bun(path, volta[\"bun\"], \"volta\")\n    for section in (\"dependencies\", \"devDependencies\", \"optionalDependencies\"):\n        ver = (data.get(section) or {}).get(\"electron\")\n        if ver:\n            electron_declared[os.path.dirname(full)] = (path, ver)\n    for name, cmd in (data.get(\"scripts\") or {}).items():\n        if isinstance(cmd, str):\n            scan_shell(path, cmd, \"scripts.%s\" % name)\n    pm = data.get(\"packageManager\")\n    if isinstance(pm, str) and pm.startswith(\"bun@\"):\n        judge_bun(path, pm, \"packageManager\")\n    if isinstance(data.get(\"pkg\"), dict):\n        add(\"REVIEW\", path, \"node single-executable (pkg config)\", \"\", EMBEDS_RUNTIME)\n\n\ndef scan_package_lock(full, path, text):\n    data = load_json(path, text, \"package-lock\")\n    if not isinstance(data, dict):\n        return\n    found = []\n    for key, info in (data.get(\"packages\") or {}).items():\n        if (key == \"node_modules/electron\" or key.endswith(\"/node_modules/electron\")) and isinstance(info, dict):\n            found.append(info.get(\"version\", \"\"))\n\n    def v1(deps):\n        for name, info in (deps or {}).items():\n            if isinstance(info, dict):\n                if name == \"electron\":\n                    found.append(info.get(\"version\", \"\"))\n                v1(info.get(\"dependencies\"))\n    v1(data.get(\"dependencies\"))\n    for ver in found:\n        judge_electron(path, ver)\n    if found:\n        electron_resolved.add(os.path.dirname(full))\n\n\ndef scan_bun_lock(full, path, text):\n    data = load_json(path, text, \"bun.lock\", jsonc=True)\n    if not isinstance(data, dict):\n        return\n    for key, info in (data.get(\"packages\") or {}).items():\n        if key == \"electron\" or key.endswith(\"/electron\"):\n            spec = info[0] if isinstance(info, list) and info else \"\"\n            judge_electron(path, str(spec).rpartition(\"@\")[2])\n            electron_resolved.add(os.path.dirname(full))\n\n\ndef scan_yarn_v1(full, path, text):\n    parsed(\"yarn.lock\")\n    names = None\n    for line in text.splitlines():\n        if not line.strip() or line.lstrip().startswith(\"#\"):\n            continue\n        if not line[0].isspace():\n            names = [lock_descriptor_name(d) for d in line.rstrip().rstrip(\":\").split(\",\")]\n        elif names and \"electron\" in names and re.match(r\"^\\s{2}version:?\\s\", line):\n            judge_electron(path, line.split(None, 1)[1].strip().strip('\"'))\n            electron_resolved.add(os.path.dirname(full))\n\n\ndef scan_cargo_toml(full, path, text):\n    data = load_toml(path, text, \"Cargo.toml\")\n    if data is None:\n        return\n    names = set()\n    for node in iter_dicts(data):\n        for k in (\"dependencies\", \"dev-dependencies\", \"build-dependencies\"):\n            if isinstance(node.get(k), dict):\n                names |= {norm(n) for n in node[k]}\n    used = sorted(names & RUSTLS_DEPS)\n    if used:\n        cargo_manifests.append((os.path.dirname(full), path, used))\n\n\ndef scan_go_mod(path, text):\n    parsed(\"go.mod\")\n    go = toolchain = None\n    for line in text.splitlines():\n        toks = line.split(\"//\", 1)[0].split()\n        if len(toks) == 2 and toks[0] == \"go\":\n            go = toks[1]\n        elif len(toks) == 2 and toks[0] == \"toolchain\":\n            toolchain = toks[1]\n    if toolchain and toolchain != \"default\":\n        judge_go(path, toolchain, \"go.mod toolchain\")\n    if go:\n        add(\"REVIEW\", path, \"go (go.mod go directive)\", go,\n            \"a minimum, not the build toolchain; check the toolchain in CI/Dockerfile and `go version ` on deployed binaries\")\n\n\ndef scan_composer_lock(path, text):\n    data = load_json(path, text, \"composer.lock\")\n    if not isinstance(data, dict):\n        return\n    for section in (\"packages\", \"packages-dev\"):\n        for p in data.get(section) or []:\n            if isinstance(p, dict) and p.get(\"name\") == \"composer/ca-bundle\":\n                judge_composer_ca_bundle(path, str(p.get(\"version\", \"\")).lstrip(\"v\"))\n\n\ndef scan_erlang_lock(path, text):\n    parsed(\"mix/rebar lock\")\n    for name, (fixed, note) in HEX_PACKAGES.items():\n        hits = re.findall(r'\"%s\"\\s*:\\s*\\{\\s*:hex\\s*,\\s*:%s\\s*,\\s*\"([^\"]+)\"' % (name, name), text)\n        hits += re.findall(r'\\{<<\"%s\">>\\s*,\\s*\\{pkg\\s*,\\s*<<\"%s\">>\\s*,\\s*<<\"([^\"]+)\">>' % (name, name), text)\n        for ver in hits:\n            judge_threshold(path, name, ver, fixed, note)\n        if not hits and re.search(r'[\"<]%s[\">]' % name, text):\n            add(\"REVIEW\", path, name, \"\", \"named in the lockfile in a form this scanner cannot read; check its version. \" + note)\n\n\ndef scan_cpan(path, text):\n    parsed(\"cpanfile\")\n    hits = re.findall(r\"Mozilla-CA-(\\d{8})\", text)\n    for ver in hits:\n        judge_threshold(path, \"Mozilla::CA\", ver, (20261020,), \"\")\n    if not hits and \"Mozilla::CA\" in text:\n        add(\"REVIEW\", path, \"Mozilla::CA\", \"\", \"required without a resolved version; check the installed one\")\n\n\ndef judge_tool(path, tool, ver):\n    tool, ver = tool.lower().split(\":\")[-1], str(ver)\n    if tool in (\"node\", \"nodejs\"):\n        judge_node(path, ver, tool)\n    elif tool in (\"go\", \"golang\"):\n        judge_go(path, ver, tool)\n    elif tool == \"java\":\n        judge_java(path, re.sub(r\"^[a-z]+-\", \"\", ver), tool)\n    elif tool == \"bun\":\n        judge_bun(path, ver, tool)\n    elif tool == \"deno\":\n        judge_deno(path, ver, tool)\n    elif tool in TOOL_FIXED:\n        judge_threshold(path, tool, ver, TOOL_FIXED[tool])\n    elif tool in GO_CLIS:\n        add(\"REVIEW\", path, tool, ver, GO_CLI_NOTE)\n\n\nVERSION_FILES = {\".nvmrc\": \"node\", \".node-version\": \"node\", \".java-version\": \"java\", \".go-version\": \"go\",\n                 \".bun-version\": \"bun\", \".dvmrc\": \"deno\", \".terraform-version\": \"terraform\"}\n\n\ndef scan_version_file(path, text, base):\n    parsed(\"version file\")\n    value = text.strip().splitlines()[0].strip() if text.strip() else \"\"\n    judge_tool(path, VERSION_FILES[base], value)\n    if not value:\n        add(\"REVIEW\", path, VERSION_FILES[base], \"\", \"an empty version file; check what runs\")\n\n\ndef scan_tool_versions(path, text):\n    parsed(\"tool versions\")\n    for line in text.splitlines():\n        toks = line.split(\"#\", 1)[0].replace(\"=\", \" \").split()\n        for ver in toks[1:]:\n            judge_tool(path, toks[0], ver)\n\n\ndef scan_mise_toml(path, text):\n    data = load_toml(path, text, \"mise.toml\")\n    if data is None:\n        return\n    for tool, spec in (data.get(\"tools\") or {}).items():\n        for s in spec if isinstance(spec, list) else [spec]:\n            judge_tool(path, tool, s.get(\"version\", \"\") if isinstance(s, dict) else s)\n\n\ndef scan_netlify(path, text):\n    data = load_toml(path, text, \"netlify.toml\")\n    if data is None:\n        return\n    for node in iter_dicts(data):\n        env = node.get(\"environment\") if isinstance(node.get(\"environment\"), dict) else {}\n        if env.get(\"NODE_VERSION\"):\n            judge_node(path, str(env[\"NODE_VERSION\"]), \"netlify NODE_VERSION\")\n        if env.get(\"GO_VERSION\"):\n            judge_go(path, str(env[\"GO_VERSION\"]), \"netlify GO_VERSION\")\n        if isinstance(node.get(\"command\"), str):\n            scan_shell(path, node[\"command\"], \"netlify build\")\n\n\ndef scan_pep723(path, text):\n    \"\"\"PEP 723 inline script metadata: `# /// script` ... `# ///`.\"\"\"\n    m = re.search(r\"^# /// script\\s*$(.*?)^# ///\\s*$\", text, re.M | re.S)\n    if not m:\n        return\n    body = \"\\n\".join(line[2:] if line.startswith(\"# \") else line[1:] for line in m.group(1).strip(\"\\n\").splitlines())\n    data = load_toml(path, body, \"PEP 723 script\")\n    for r in (data or {}).get(\"dependencies\") or []:\n        if isinstance(r, str):\n            judge_requirement(path, r)\n\n\ndef scan_global_json(path, text):\n    data = load_json(path, text, \"global.json\", jsonc=True)\n    ver = ((data or {}).get(\"sdk\") or {}).get(\"version\") if isinstance(data, dict) else None\n    if ver:\n        add(\"REVIEW\", path, \".NET SDK (global.json)\", ver,\n            \".NET trusts the OS store (OpenSSL on Linux, CTL updates on Windows): patch the base image or host\")\n\n\n# ---------------------------------------------------------------- certificates and keys\n\ndef scan_certificates(full, path, data, ext, base):\n    \"\"\"Find the affected certificates and keys in a file of any kind, by bytes.\n    full is None for an archive member.\"\"\"\n    found, counted = {}, [0]\n\n    def take(ders, where):\n        for der in ders:\n            counted[0] += 1\n            try:\n                kind, name = E.classify(der)\n                aki = E.authority_key_id(der)\n            except (E.DERError, IndexError) as e:\n                add(\"ERROR\", path, \"certificate\", where, \"a certificate that does not parse: %s\" % e)\n                continue\n            if kind:\n                found.setdefault(name, \"%s certificate%s\" % (kind, where))\n            elif aki in E.BAD_INTERMEDIATE_SKIS:\n                found.setdefault(\"certificate for %s\" % E.subject_cn(der),\n                                 \"issued by %s%s: replace it\" % (E.BAD_INTERMEDIATE_SKIS[aki], where))\n\n    store_like = ext in STORE_EXT or base in (\"cacerts\", \"jssecacerts\") or \\\n        data[:4] in (trust_store.JKS_MAGIC, trust_store.JCEKS_MAGIC)\n    if store_like:\n        try:\n            entries, _ = trust_store.read_data(data, full)\n            take([der for der, _, _ in entries], \"\")\n        except trust_store.NotAStore:\n            if ext in KEYSTORE_EXT or base in (\"cacerts\", \"jssecacerts\"):\n                add(\"ERROR\", path, \"keystore\", \"\", \"not in a keystore format this scanner can read; check it with keytool\")\n        except (trust_store.StoreError, E.DERError, IndexError, OSError) as e:\n            add(\"ERROR\", path, \"certificate store\", \"\", \"could not be read: %s. Check it with trust_store.py\" % e)\n    elif b\"-----BEGIN\" in data:\n        take_pem(take, path, data, \"\")\n    for payload in E.base64_payloads(data):  # binaries too: a program can carry a base64 bundle\n        if b\"-----BEGIN\" in payload:\n            take_pem(take, path, payload, \" (base64-encoded)\")\n        elif payload[:1] == b\"\\x30\":\n            try:\n                E.spki_sha256(payload)\n                take([payload[:E.cert_length(payload)]], \" (base64 DER)\")\n            except (E.DERError, IndexError):\n                pass\n        for name in E.public_keys_in(payload):\n            found.setdefault(name, \"public key, base64-encoded\")\n    for name in E.public_keys_in(data):\n        found.setdefault(name, \"public key in the file's bytes\")\n    for name, what in sorted(found.items()):\n        add(\"VULNERABLE\", path, name, what,\n            \"this file carries it. A trust store, bundle, pin list or binary that embeds it trusts the affected chain; \"\n            \"remove it or replace the file (a block list that names it is the one exception)\")\n    if counted[0] and not found:\n        add(\"INFO\", path, \"certificates\", \"%d read\" % counted[0], \"none of them is an affected root or intermediate\")\n    if counted[0] or found:\n        parsed(\"certificates\")\n\n\ndef take_pem(take, path, data, where):\n    ders = []\n    for der, err in E.pem_blocks(data):\n        if err:\n            add(\"ERROR\", path, \"PEM certificate\", where.strip(\" ()\"), err)\n        else:\n            ders.append(der)\n    take(ders, where)\n\n\ndef search_large(full, path):\n    \"\"\"Search a file too large to read whole (a runtime binary such as node\n    embeds its root store as PEM text) in overlapping chunks: PEM blocks and raw\n    keys. Base64 runs are not decoded here.\"\"\"\n    overlap = 1 << 16\n    found, counted, tail = {}, 0, b\"\"\n    try:\n        with open(full, \"rb\") as f:\n            while True:\n                chunk = f.read(CHUNK)\n                if not chunk:\n                    break\n                window = tail + chunk\n                for name in E.public_keys_in(window):\n                    found.setdefault(name, \"public key in the file's bytes\")\n                if b\"-----BEGIN\" in window:\n                    for der, err in E.pem_blocks(window):\n                        if err:\n                            continue  # a block cut by the chunk edge is read whole from the next window\n                        counted += 1\n                        try:\n                            kind, name = E.classify(der)\n                        except (E.DERError, IndexError):\n                            continue\n                        if kind:\n                            found.setdefault(name, \"%s certificate (PEM)\" % kind)\n                tail = window[-overlap:]\n    except OSError as e:\n        add(\"ERROR\", path, \"file\", \"\", \"could not be read: %s\" % e)\n        return\n    for name, what in sorted(found.items()):\n        add(\"VULNERABLE\", path, name, what,\n            \"this file carries it; a trust store or binary that embeds it trusts the affected chain. A runtime \"\n            \"(node, bun, a compiled CLI) that embeds its roots stays exposed until replaced with a fixed build\")\n    if counted:\n        parsed(\"certificates\")\n\n\n# ---------------------------------------------------------------- dispatch\n\ndef is_requirements(low, path):\n    parent = os.path.basename(os.path.dirname(path)).lower()\n    return bool(re.match(r\"(requirements|constraints)[\\w.-]*\\.(txt|in|lock)$\", low)) or low.endswith(\"requirements.txt\") \\\n        or (parent in (\"requirements\", \"reqs\") and low.endswith((\".txt\", \".in\", \".lock\")))\n\n\ndef is_dockerfile(low):\n    return low.startswith((\"dockerfile\", \"containerfile\")) or low.endswith((\".dockerfile\", \".containerfile\"))\n\n\ndef dispatch(full, path, text, low, ext):\n    if low in (\"poetry.lock\", \"uv.lock\", \"pdm.lock\") or re.match(r\"pylock(?:\\.[\\w-]+)?\\.toml$\", low):\n        scan_toml_lock(path, text, low, PY_PACKAGES)\n    elif low == \"cargo.lock\":\n        cargo_locks.add(os.path.dirname(full))\n        scan_toml_lock(path, text, low, CARGO_PACKAGES)\n    elif low == \"cargo.toml\":\n        scan_cargo_toml(full, path, text)\n    elif is_requirements(low, path):\n        scan_requirements(path, text)\n    elif low == \"pipfile\":\n        scan_pipfile(path, text)\n    elif low == \"pipfile.lock\":\n        scan_pipfile_lock(path, text)\n    elif low == \"pyproject.toml\":\n        scan_pyproject(path, text)\n    elif low == \"setup.cfg\":\n        scan_setup_cfg(path, text)\n    elif low == \"setup.py\":\n        scan_setup_py(path, text)\n    elif low == \"package.json\":\n        scan_package_json(full, path, text)\n    elif low in (\"package-lock.json\", \"npm-shrinkwrap.json\"):\n        scan_package_lock(full, path, text)\n    elif low == \"bun.lock\":\n        scan_bun_lock(full, path, text)\n    elif low == \"yarn.lock\" and \"__metadata:\" not in text:\n        scan_yarn_v1(full, path, text)\n    elif low in (\"go.mod\", \"go.work\"):\n        scan_go_mod(path, text)\n    elif low == \"composer.lock\":\n        scan_composer_lock(path, text)\n    elif low in (\"mix.lock\", \"rebar.lock\"):\n        scan_erlang_lock(path, text)\n    elif low in (\"cpanfile.snapshot\", \"cpanfile\"):\n        scan_cpan(path, text)\n    elif low in VERSION_FILES:\n        scan_version_file(path, text, low)\n    elif low in (\".tool-versions\", \".sdkmanrc\"):\n        scan_tool_versions(path, text)\n    elif low in (\"mise.toml\", \".mise.toml\", \"mise.local.toml\", \".rtx.toml\") or path.replace(os.sep, \"/\").endswith(\"mise/config.toml\"):\n        scan_mise_toml(path, text)\n    elif is_dockerfile(low):\n        scan_dockerfile(path, text)\n    elif low == \"global.json\":\n        scan_global_json(path, text)\n    elif low.startswith(\".env\") or low.endswith(\".env\"):\n        scan_env_file(path, text)\n    elif low == \"netlify.toml\":\n        scan_netlify(path, text)\n    elif low in (\"devcontainer.json\", \".devcontainer.json\"):\n        data = load_json(path, text, \"devcontainer.json\", jsonc=True)\n        if isinstance(data, dict) and isinstance(data.get(\"image\"), str):\n            judge_image(path, data[\"image\"], \"devcontainer\")\n    elif ext in (\".tf\", \".hcl\") and low != \".terraform.lock.hcl\":\n        parsed(\"terraform\")\n        for m in re.finditer(r\"\"\"[\"']?\\bimage[\"']?\\s*[=:]\\s*(?:\"([^\"\\n]*)\"|'([^'\\n]*)'|([A-Za-z_][\\w.\\[\\]\"()-]*))\"\"\", text):\n            value = m.group(1) if m.group(1) is not None else m.group(2)\n            if value is None:  # var.image, local.x, module.y.image: a reference, not a literal\n                add(\"REVIEW\", path, \"image (terraform image)\", m.group(3),\n                    \"the image comes from a variable or template; check what the build or deploy actually uses\")\n            else:\n                judge_image(path, value, \"terraform image\")\n        for m in re.finditer(r\"\"\"\\b(user_data(?:_base64)?)\\s*=\\s*<<-?\\s*(\\w+)\\n(.*?)\\n\\s*\\2\\b\"\"\", text, re.S):\n            scan_shell(path, m.group(3), m.group(1))\n    elif low == \"jenkinsfile\" or low.endswith(\".jenkinsfile\"):\n        parsed(\"Jenkinsfile\")\n        for m in re.finditer(r\"\"\"(?:image|docker\\.image)\\s*[(:]?\\s*['\"]([^'\"]+)['\"]\"\"\", text):\n            judge_image(path, m.group(1), \"Jenkinsfile\")\n        for m in re.finditer(r\"\\bsh\\s*\\(?\\s*(['\\\"]{1,3})(.*?)\\1\", text, re.S):\n            scan_shell(path, m.group(2), \"Jenkinsfile sh\")\n        for m in re.finditer(r\"\"\"\\b(nodejs|jdk|go)\\s+['\"]([^'\"]+)['\"]\"\"\", text):\n            add(\"REVIEW\", path, \"Jenkins tool %s\" % m.group(1), m.group(2),\n                \"a Jenkins tool installation: check the version installed on the agents\")\n    elif low.endswith((\".gradle\", \".gradle.kts\")):\n        parsed(\"gradle\")\n        for m in re.finditer(r\"JavaLanguageVersion\\.of\\(\\s*(\\d+)\\s*\\)\", text):\n            add(\"REVIEW\", path, \"gradle java toolchain\", m.group(1),\n                \"Gradle may auto-provision this JDK; its cacerts carries both roots until patched. \"\n                \"Check the toolchain JDK on CI runners with trust_store.py java\")\n    elif low == \".terraform.lock.hcl\":\n        parsed(\"terraform lock\")\n        add(\"REVIEW\", path, \"terraform providers\", \"\", \"providers are Go binaries; \" + GO_CLI_NOTE)\n    if ext in (\".yml\", \".yaml\") or (low == \"yarn.lock\" and \"__metadata:\" in text):\n        scan_yaml_file(full, path, text, low)\n    if low.endswith(\"-explicit.txt\") or text.startswith(\"@EXPLICIT\") or \"\\n@EXPLICIT\" in text[:4096]:\n        parsed(\"conda explicit\")\n    if ext == \".py\" and \"# /// script\" in text:\n        scan_pep723(path, text)\n    if ext in (\".sh\", \".bash\", \".zsh\") or low in (\"makefile\", \"justfile\", \"procfile\"):\n        scan_shell(path, text, \"script\")\n    scan_urls(path, text)\n    scan_installers(path, text)\n\n\ndef scan_text_hints(path, text, ext):\n    for rx, status, label, detail in (\n        (EMUDHRA_MENTION, \"REVIEW\", \"emSign/eMudhra reference\", \"pinning or trust config naming the affected CA\"),\n        (TRUST_KNOBS, \"INFO\", \"custom trust setting\", \"decides which bundle this code trusts; make sure that bundle is patched\"),\n        (TLS_DISABLED, \"REVIEW\", \"TLS verification disabled\", \"not this incident, but it trusts every certificate; flag it to the owner\"),\n        (TLS_UNVERIFIED, \"REVIEW\", \"TLS without certificate verification\",\n         \"encrypts but accepts any server certificate, including one issued by the compromised intermediates: \"\n         \"use sslmode=verify-full (or ssl: { rejectUnauthorized: true, ca: ... }) with a patched CA file\"),\n    ):\n        seen = set()\n        for m in rx.finditer(text):\n            line = text.count(\"\\n\", 0, m.start()) + 1\n            if line not in seen:\n                seen.add(line)\n                add(status, \"%s:%d\" % (path, line), label, m.group(0)[:60], detail)\n    if ext == \".go\" and \"golang.org/x/crypto/x509roots/fallback\" in text:\n        add(\"REVIEW\", path, \"x509roots/fallback\", \"\",\n            \"embeds its own root bundle for hosts without one; bump golang.org/x/crypto to a release that drops the \"\n            \"emSign roots, rebuild, and check the binary with go_binaries.py\")\n\n\ndef decode_text(data):\n    \"\"\"The file as text, or None for a binary. UTF-8, UTF-16 and UTF-32 with a\n    BOM, and UTF-16 without one (ASCII text with every other byte NUL), are\n    text: Windows tools write them, and skipping them as binary hides them.\"\"\"\n    for bom, enc in ((codecs.BOM_UTF32_LE, \"utf-32\"), (codecs.BOM_UTF32_BE, \"utf-32\"), (codecs.BOM_UTF8, \"utf-8-sig\"),\n                     (codecs.BOM_UTF16_LE, \"utf-16\"), (codecs.BOM_UTF16_BE, \"utf-16\")):\n        if data.startswith(bom):\n            return data.decode(enc, \"replace\")\n    head = data[:8192]\n    if b\"\\x00\" not in head:\n        return data.decode(\"utf-8\", \"replace\")\n    if len(head) >= 16:\n        even, odd = head[0::2], head[1::2]\n        if odd.count(0) > 0.95 * len(odd) and even.count(0) < 0.05 * len(even):\n            return data.decode(\"utf-16-le\", \"replace\")\n        if even.count(0) > 0.95 * len(even) and odd.count(0) < 0.05 * len(odd):\n            return data.decode(\"utf-16-be\", \"replace\")\n    return None\n\n\n# ---------------------------------------------------------------- archives\n\nARCHIVE_DEPTH = 4\nARCHIVE_BUDGET = 1 << 30  # bytes decompressed per top-level archive before giving up as REVIEW\nUNOPENED = {\".7z\": \"7-Zip\", \".rar\": \"RAR\", \".zst\": \"zstd\", \".tzst\": \"zstd\", \".lz4\": \"lz4\", \".cab\": \"CAB\",\n            \".msi\": \"MSI\", \".dmg\": \"disk image\", \".iso\": \"disk image\", \".pkg\": \"macOS package\", \".rpm\": \"RPM\",\n            \".deb\": \"Debian package\", \".squashfs\": \"squashfs\", \".sif\": \"Singularity image\", \".asar\": \"Electron asar\"}\nUNOPENED_MAGIC = ((b\"7z\\xbc\\xaf\\x27\\x1c\", \"7-Zip\"), (b\"Rar!\", \"RAR\"), (b\"\\x28\\xb5\\x2f\\xfd\", \"zstd\"),\n                  (b\"\\xed\\xab\\xee\\xdb\", \"RPM\"), (b\"!\\ndebian\", \"Debian package\"), (b\"hsqs\", \"squashfs\"))\n\n\ndef archive_kind(head, name):\n    if head[:4] in (b\"PK\\x03\\x04\", b\"PK\\x05\\x06\"):\n        return \"zip\"\n    if head[:2] == b\"\\x1f\\x8b\" or head[:3] == b\"BZh\" or head[:6] == b\"\\xfd7zXZ\\x00\" or head[257:262] == b\"ustar\":\n        return \"tar-or-stream\"\n    for magic, kind in UNOPENED_MAGIC:\n        if head.startswith(magic):\n            return kind\n    return UNOPENED.get(os.path.splitext(name.lower())[1])\n\n\ndef open_archive(fileobj, kind):\n    \"\"\"(member name, reader) pairs. reader(limit) returns at most limit bytes.\"\"\"\n    if kind == \"zip\":\n        zf = zipfile.ZipFile(fileobj)\n        for info in zf.infolist():\n            if not info.is_dir():\n                yield info.filename, info.file_size, (lambda n, i=info: zf.open(i).read(n))\n        return\n    try:\n        tf = tarfile.open(fileobj=fileobj, mode=\"r:*\")\n    except tarfile.ReadError:\n        # A single compressed file (cacert.pem.gz), not a tarball.\n        fileobj.seek(0)\n        head = fileobj.read(6)\n        fileobj.seek(0)\n        opener = gzip.GzipFile if head[:2] == b\"\\x1f\\x8b\" else bz2.BZ2File if head[:3] == b\"BZh\" else lzma.LZMAFile\n        stream = opener(fileobj=fileobj) if opener is gzip.GzipFile else opener(fileobj)\n        yield \"(decompressed)\", -1, stream.read\n        return\n    for m in tf:\n        if m.isfile():\n            yield m.name, m.size, (lambda n, m=m: tf.extractfile(m).read(n))\n\n\ndef scan_archive(fileobj, path, kind, depth=0, budget=None):\n    \"\"\"Search every member of an archive in memory, recursing into nested\n    archives. Members are never written to disk, and nothing is run.\"\"\"\n    budget = budget if budget is not None else [ARCHIVE_BUDGET]\n    if kind not in (\"zip\", \"tar-or-stream\"):\n        add(\"REVIEW\", path, \"archive (%s)\" % kind, \"\",\n            \"a format this scanner cannot open, so its contents were not searched: unpack it and scan the files\")\n        return\n    if depth >= ARCHIVE_DEPTH:\n        add(\"REVIEW\", path, \"nested archive\", \"\", \"nested deeper than %d levels; unpack it and scan the files\" % ARCHIVE_DEPTH)\n        return\n    members = 0\n    try:\n        for name, size, read in open_archive(fileobj, kind):\n            mpath = \"%s!%s\" % (path, name)\n            if budget[0] <= 0:\n                add(\"REVIEW\", path, \"archive\", \"\", \"more than %d MB uncompressed; the rest was not searched. Unpack it and \"\n                    \"scan the files\" % (ARCHIVE_BUDGET >> 20))\n                return\n            try:\n                data = read(MAX_BYTES + 1)\n            except (RuntimeError, zipfile.BadZipFile, tarfile.TarError, OSError, EOFError, lzma.LZMAError) as e:\n                add(\"ERROR\", mpath, \"archive member\", \"\", \"could not be read (%s): %s\" % (e.__class__.__name__, e))\n                continue\n            members += 1\n            budget[0] -= len(data)\n            if len(data) > MAX_BYTES:\n                add(\"REVIEW\", mpath, \"archive member\", \"\", \"larger than %d MB uncompressed; unpack it and scan it\"\n                    % (MAX_BYTES >> 20))\n                data = data[:MAX_BYTES]\n            scan_member(mpath, name, data, depth + 1, budget)\n    except (zipfile.BadZipFile, tarfile.TarError, OSError, EOFError, lzma.LZMAError, ValueError) as e:\n        add(\"ERROR\", path, \"archive\", \"\", \"could not be opened (%s): %s\" % (e.__class__.__name__, e))\n        return\n    coverage[\"archive_members\"] = coverage.get(\"archive_members\", 0) + members\n    parsed(\"archive\")\n\n\ndef scan_member(mpath, name, data, depth, budget):\n    low = os.path.basename(name).lower()\n    kind = archive_kind(data[:512], name)\n    if kind:\n        scan_archive(io.BytesIO(data), mpath, kind, depth, budget)\n        return\n    try:\n        scan_certificates(None, mpath, data, os.path.splitext(low)[1], low)\n        text = decode_text(data)\n        if text is not None and b\"\\x00\" in data[:8192]:\n            scan_certificates(None, mpath, text.encode(\"utf-8\"), os.path.splitext(low)[1], low)\n    except Exception as e:\n        add(\"ERROR\", mpath, \"scanner\", \"\", \"%s while searching this member: %s\" % (e.__class__.__name__, e))\n\n\ndef scan_file(full, path):\n    coverage[\"files\"] += 1\n    low = os.path.basename(full).lower()\n    ext = os.path.splitext(low)[1]\n    try:\n        size = os.path.getsize(full)\n        with open(full, \"rb\") as f:\n            head = f.read(512)\n        kind = archive_kind(head, low)\n        if kind:\n            with open(full, \"rb\") as f:\n                scan_archive(f, path, kind)\n            if size > MAX_BYTES:\n                return\n        if size > MAX_BYTES:\n            coverage[\"large\"].append(path)\n            search_large(full, path)\n            return\n        with open(full, \"rb\") as f:\n            data = f.read()\n    except OSError as e:\n        add(\"ERROR\", path, \"file\", \"\", \"could not be read: %s\" % e)\n        coverage[\"unreadable\"].append(path)\n        return\n    if low in SKILL_FILES and SKILL_MARKER in data[:2048]:\n        return\n    # A parser bug must never turn into silence: any exception is an ERROR row.\n    try:\n        scan_certificates(full, path, data, ext, low)\n    except Exception as e:\n        add(\"ERROR\", path, \"scanner\", \"\", \"%s while searching this file for certificates: %s\" % (e.__class__.__name__, e))\n    text = decode_text(data)\n    if text is None:\n        return  # binary: searched for certificates and keys above, nothing else to parse\n    if b\"\\x00\" in data[:8192]:\n        # UTF-16/32: search the decoded text too, where PEM and base64 are readable.\n        try:\n            scan_certificates(None, path, text.encode(\"utf-8\"), ext, low)\n        except Exception as e:\n            add(\"ERROR\", path, \"scanner\", \"\", \"%s while searching this file for certificates: %s\" % (e.__class__.__name__, e))\n    try:\n        dispatch(full, path, text, low, ext)\n    except Exception as e:\n        add(\"ERROR\", path, \"scanner\", \"\", \"%s while reading this file: %s\" % (e.__class__.__name__, e))\n    if ext in CODE_EXT or is_dockerfile(low) or low.startswith(\".env\") or low in (\"makefile\", \"justfile\", \"procfile\"):\n        scan_text_hints(path, text, ext)\n\n\ndef walk(root, include_all):\n    if os.path.isfile(root):\n        yield root, os.path.basename(root)\n        return\n    if not os.path.isdir(root):\n        add(\"ERROR\", root, \"path\", \"\", \"does not exist or is not a file or directory\")\n        return\n\n    def onerror(e):\n        add(\"ERROR\", getattr(e, \"filename\", None) or root, \"directory\", \"\", \"could not be listed: %s\" % e)\n        coverage[\"unreadable\"].append(getattr(e, \"filename\", None) or root)\n\n    for dirpath, dirnames, filenames in os.walk(root, onerror=onerror):\n        keep = []\n        for d in sorted(dirnames):\n            full = os.path.join(dirpath, d)\n            if os.path.abspath(full) == SKILL_ROOT:\n                continue\n            if os.path.islink(full):\n                coverage[\"symlinked_dirs\"].append(os.path.relpath(full, root))\n            elif not include_all and (d in SKIP_DIRS or os.path.isfile(os.path.join(full, \"pyvenv.cfg\"))):\n                coverage[\"pruned\"].append(os.path.relpath(full, root))\n            else:\n                keep.append(d)\n        dirnames[:] = keep\n        for fn in sorted(filenames):\n            full = os.path.join(dirpath, fn)\n            if os.path.isfile(full):\n                yield full, os.path.relpath(full, root)\n\n\ndef resolved_above(d, done):\n    while True:\n        if d in done:\n            return True\n        parent = os.path.dirname(d)\n        if parent == d:\n            return False\n        d = parent\n\n\ndef post_pass():\n    \"\"\"Checks that need the whole tree: a declared dependency no lockfile resolved.\"\"\"\n    for d, (path, spec) in sorted(electron_declared.items()):\n        if resolved_above(d, electron_resolved):\n            continue\n        if RANGE.search(str(spec)) or vtuple(spec) is None:\n            add(\"REVIEW\", path, \"electron\", spec, \"no lockfile in the tree resolved electron; the installed version decides\")\n        else:\n            judge_electron(path, spec)\n    for d, (path, names) in sorted(py_consumers.items()):\n        if not resolved_above(d, certifi_pinned):\n            add(\"REVIEW\", path, \"certifi (not pinned)\", \", \".join(sorted(names)),\n                \"these load certifi's bundle, and nothing here pins certifi, so the one resolved at install time \"\n                \"decides: pin certifi>=2026.10.19 or check the deployed environment with trust_store.py python. \"\n                \"botocore and grpcio can also ship bundles of their own\")\n    if package_jsons and not node_seen[0]:\n        add(\"REVIEW\", package_jsons[0], \"node (no version source)\", \"\",\n            \"nothing in the tree names the Node version (.nvmrc, engines, volta, an image tag, setup-node), so the \"\n            \"platform's default runs it. Probe the deployed runtime (SKILL.md, managed runtimes)\")\n    for d, path, used in cargo_manifests:\n        if not resolved_above(d, cargo_locks):\n            add(\"REVIEW\", path, \"rustls dependencies\", \", \".join(used),\n                \"no Cargo.lock in the tree: the webpki-roots / rustls-webpki that resolves at build time decides\")\n\n\nORDER = {\"VULNERABLE\": 0, \"ERROR\": 1, \"REVIEW\": 2, \"FIXED\": 3, \"INFO\": 4}\n\n\ndef main():\n    ap = argparse.ArgumentParser(description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter)\n    ap.add_argument(\"paths\", nargs=\"+\")\n    ap.add_argument(\"--json\", action=\"store_true\", help=\"emit JSON instead of a Markdown table\")\n    ap.add_argument(\"--no-info\", action=\"store_true\", help=\"drop INFO rows from the output\")\n    ap.add_argument(\"--all\", action=\"store_true\", help=\"also scan node_modules, virtualenvs and the other pruned directories\")\n    args = ap.parse_args()\n    for root in args.paths:\n        label = os.path.basename(os.path.abspath(root))\n        for full, rel in walk(root, args.all):\n            scan_file(full, os.path.join(label, rel) if len(args.paths) > 1 else rel)\n    post_pass()\n    for parser, files in sorted(coverage[\"missing_parsers\"].items()):\n        add(\"ERROR\", \"%d files\" % len(files), parser, \"not installed\",\n            \"these files were not parsed, only searched for certificates and hints: %s%s. Install it and run again\"\n            % (\", \".join(files[:5]), \" ...\" if len(files) > 5 else \"\"))\n    if not recognised[0]:\n        add(\"ERROR\", \", \".join(args.paths), \"scanner\", \"\",\n            \"nothing in this tree was recognised (no manifest, lockfile, Dockerfile, CI config or certificate), \"\n            \"so it cannot say what the code runs on; inspect it by hand\")\n    rows = sorted(findings, key=lambda f: (ORDER[f[\"status\"]], f[\"path\"], f[\"component\"]))\n    status = 1 if any(f[\"status\"] == \"VULNERABLE\" for f in rows) else \\\n        2 if any(f[\"status\"] == \"ERROR\" for f in rows) else \\\n        3 if any(f[\"status\"] == \"REVIEW\" for f in rows) else 0\n    shown = [f for f in rows if not (args.no_info and f[\"status\"] == \"INFO\")]\n    if args.json:\n        json.dump({\"exit\": status, \"findings\": shown, \"coverage\": coverage}, sys.stdout, indent=2)\n        print()\n        return status\n    print(\"| Status | Path | Component | Version | Detail |\")\n    print(\"|---|---|---|---|---|\")\n    for f in shown:\n        cells = [f[\"status\"], f[\"path\"], f[\"component\"], f[\"version\"], f[\"detail\"]]\n        print(\"| \" + \" | \".join(c.replace(\"|\", \"\\\\|\").replace(\"\\n\", \" \") for c in cells) + \" |\")\n    counts = {s: sum(1 for f in rows if f[\"status\"] == s) for s in ORDER}\n    print(\"\\n%(VULNERABLE)d vulnerable, %(ERROR)d errors, %(REVIEW)d to review, %(FIXED)d fixed, %(INFO)d info\" % counts)\n    print(\"Coverage: %d files read; parsed %s.\" % (coverage[\"files\"], \", \".join(\n        \"%s x%d\" % kv for kv in sorted(coverage[\"parsed\"].items())) or \"nothing\"))\n    for key, label in ((\"pruned\", \"Pruned (rerun with --all to include)\"), (\"symlinked_dirs\", \"Symlinked directories not followed\"),\n                       (\"large\", \"Over %d MB, searched for keys only\" % (MAX_BYTES >> 20)), (\"unreadable\", \"Unreadable\")):\n        items = coverage[key]\n        if items:\n            print(\"%s: %s%s\" % (label, \", \".join(items[:10]), \" and %d more\" % (len(items) - 10) if len(items) > 10 else \"\"))\n    print(\"Thresholds are the advisory's table as of %s; run check_advisory.py for anything newer. \"\n          \"Exit %d (0 only when nothing is vulnerable, unreadable or left to review).\" % (SNAPSHOT_DATE, status))\n    return status\n\n\nif __name__ == \"__main__\":\n    sys.exit(main())\n", "url": "https://gist.github.com/moredatarequired/263a49b9fb776e67bffd1bded9cd81d0"}, {"timestamp": "2026-10-22T15:43:39Z", "date_only": false, "value": "2026-10-22T15:43:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T15:43:39Z", "date_only": false, "value": "2026-10-22T15:43:39+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T15:43:39Z", "date_only": false, "value": "2026-10-22T15:43:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T16:18:19.040Z", "date_only": false, "value": "2026-10-22T16:18:19.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111943", "record": "FKIE_CVE-2026-111943", "field": "lastModified"}, {"timestamp": "2026-10-22T16:24:59Z", "date_only": false, "value": "2026-10-22T16:24:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/dansku/2132d01a7fc33e91ea57ff36e5c85fd0", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "8762f3ac-4a81-4dba-9eb1-50c0eda87d54", "content": "## Role and rules\nYou are doing a read-only security assessment of this server against the October 2026 security releases for PHP, Node.js, Go and NGINX (reference data below). The server has several Linux users, one Laravel app and some other services. I believe PHP was already upgraded, but I am not sure whether manual configuration, multiple installed versions, or long-running processes mean the old code is still live. Your job is to find out what is actually running, not what should be running.\n\nHard rules:\n- DO NOT change anything. No package installs, upgrades or removals, no `apt update`, no restarts, reloads or kills, no config edits, no container pulls, rebuilds or restarts, no composer/npm installs.\n- Read-only commands only. Run `sudo -n true` first. If sudo needs a password, do not wait on it; proceed without root and list every blocked check under Gaps. Never run a command that waits for interactive input.\n- Only run `--version` on binaries that come from a known package (`dpkg -S`), a known version manager (nvm, asdf, mise, volta, fnm, n) or an official container image. For anything else use `file`, `strings` and `sha256sum` only. Never execute unknown files.\n- Never start containers. For stopped containers use `docker inspect`, `docker image inspect` and `docker history` only. `docker exec` into running containers is allowed for read-only commands.\n- Keep load low: prefix scans with `nice -n 19 ionice -c3`, use `find -xdev`, and limit scans to /usr, /opt, /srv, /var/www, /home, /root, /etc and Docker volume paths. No `find /`.\n- Trim output (`| head -50`, `| tail -50`). Save raw command output to $EVIDENCE_DIR and write the report incrementally after each section so nothing is lost if you run out of context.\n- Do not print secrets. When you read `.env` files, configs or environment variables, redact values; only note which keys exist if relevant.\n- Record all times with timezone. `ps lstart` and dpkg.log are local time; do not mix them with UTC.\n- The only things you create are $REPORT_PATH and $EVIDENCE_DIR.\n- If you have network access, you may read the primary advisories listed at the end to confirm version ranges and backport details. Do not send any data from this server anywhere.\n\n## Reference data\nPHP: CVE-2026-109618 and CVE-2026-109619, both critical unauthenticated RCE in request handling (cleanup after out-of-memory, and stale request state after free). Fixed in 8.5.12, 8.4.27, 8.3.36, 8.2.35. 8.1 and older are EOL upstream and need a confirmed vendor backport. Only updating is a complete fix, and every serving process must be restarted.\nNode.js: 21 Oct security release (DNS NUL truncation, TLS hostname verification bypasses, Brotli decoder out-of-bounds write/RCE, plus medium/low issues). Fixed in 22.23.4, 24.22.1, 26.12.1. EOL lines are affected.\nGo: CVE-2026-111943 / GO-2026-6809, crypto/x509 now rejects chains through selected untrusted intermediates. Fixed in 1.27.3 and 1.26.10. Binaries must be rebuilt; a toolchain upgrade does not change existing binaries.\nNGINX: multiple October advisories. Upstream fixed in 1.30.6+ and 1.31.7+, distro packages may backport under older version strings. Configuration-dependent issues: CVE-2026-15176 (`alias` + `rewrite` with `$request_filename` in certain directives), CVE-2026-93479 (script evaluation buffer overflow), CVE-2026-97205 (use-after-free with async file I/O and certain SSI handling), CVE-2026-95101 (HTTP/3 request body injection), CVE-2026-97629 (TLS session forgery). NGINX Proxy Manager (NPM) bundles its own NGINX/OpenResty; its app version does not tell you the NGINX build.\n\n## What to investigate\n\n### 0. Baseline\n- OS, distro release, kernel, uptime, package sources (apt sources including PPAs like ondrej/php or sury, nodesource, etc.).\n- All human and service users with a login shell or a home directory. You will check each one in the steps below.\n- What listens on the network: `ss -tulpn`, mapped to process, user and binary. Firewall state (`ufw status verbose`, `iptables -S`, `nft list ruleset`) to decide what is actually internet-facing.\n- Docker/Podman: running and stopped containers, image tags and digests, exposed ports, compose files and where they live.\n- systemd units (system and per-user), cron (system and every user's crontab via `crontab -l -u`), supervisor configs, pm2 per user.\n\n### 1. PHP (highest priority)\n1.0 Establish what was upgraded and when, before anything else:\n- /var/log/apt/history.log*, /var/log/dpkg.log*, /var/log/unattended-upgrades/. Note the exact install timestamp of every php* and nginx* package. This is the reference time for every \"process started before patch\" check below.\n- Run `needrestart -r l`, `checkrestart` and `sudo lsof +L1` if available. Any PHP, NGINX, Node or Go process holding deleted files is running unpatched code; list them all with PID, user, command and start time.\n- Find unmerged or stale config: `find /etc -xdev \\( -name '*.dpkg-dist' -o -name '*.dpkg-old' -o -name '*.ucf-dist' \\)`, and check /etc/php/*/fpm/pool.d/ for pools belonging to PHP versions that should no longer serve traffic.\n\n1.1 Binaries on disk:\n- Every PHP binary: `/usr/bin/php*`, `/usr/sbin/php-fpm*`, `/usr/local/bin`, `/opt`, `update-alternatives --display php`, phpbrew/asdf/mise/custom builds in any home directory, and PHP inside containers (`docker exec  php -v`).\n- For each: exact version, which package provides it (`dpkg -S`, `dpkg -l | grep php`), and whether that package is the patched one. If the version string looks old, check the package changelog (`zcat /usr/share/doc//changelog.Debian.gz | head -50`) for the CVE IDs to confirm a backport.\n\n1.2 Running processes:\n- Every running PHP process: PHP-FPM masters and pools, Apache mod_php, php-cgi, FrankenPHP, RoadRunner/Octane, Swoole, queue workers, Horizon, schedulers, long-running artisan commands. For each PID record: user, start time (`ps -eo pid,user,lstart,cmd`), and the binary it is actually running (`ls -l /proc//exe`). A \"(deleted)\" target, or a start time earlier than the package install time from 1.0, means the process is still running the old unpatched code. This is the key check.\n\n1.3 Vhost to runtime mapping:\n- Produce a table: vhost/server_name \u2192 `fastcgi_pass` / `SetHandler` / proxy target \u2192 FPM pool file \u2192 FPM master PID and version. Any vhost pointing at an old socket, or at an FPM master not on a fixed version, is a finding.\n\n1.4 Applications:\n- Laravel app: location, owning user, `composer.json` PHP constraint, how it is served (FPM, Octane, container), its queue/scheduler workers and which binary they use. Note the deployment method (git pull, Envoyer, Forge, Deployer, Docker).\n- Any other PHP apps or tools (phpMyAdmin, WordPress, monitoring panels, control panels like Plesk/cPanel/Virtualmin/Forge agent).\n- Temporary mitigations in place, if any, from the PHP advisory (note them, do not treat them as a fix).\n\n### 2. Node.js\n- Every node binary: system packages, nodesource, `/usr/local`, nvm/fnm/volta/n/asdf/mise in every user's home, node inside containers, Single Executable Applications (only if cheap to detect).\n- Running node processes (pm2, systemd, containers): user, version via `/proc//exe --version` (allowed because it is a known runtime), start time, what they serve, whether internet-facing.\n- Flag build-only usage separately (e.g. Laravel Vite builds) from long-running services. Build-only is lower risk but still note it.\n- For running services, note if they handle attacker-controlled Brotli input, use `dns.resolve`, make outbound TLS calls, or use the permission model or snapshots.\n\n### 3. Go\n- Go toolchains installed (any user, `/usr/local/go`, asdf, mise, etc.).\n- Go binaries actually running or deployed: use `go version ` or `go version -m ` if a toolchain exists, otherwise `strings  | grep -m1 -E '^go1\\.[0-9]+'`. Check listening services, `/usr/local/bin`, `/opt`, home dirs, and container entrypoints.\n- Classify each as: built by us (we must rebuild), or vendor-provided (docker, containerd, runc, caddy, traefik, prometheus exporters, etc.: patch comes from the vendor package/image).\n- Note which ones make outbound TLS connections and to what, since the fix can break chains through the denylisted intermediates.\n\n### 4. NGINX and NGINX Proxy Manager\n- Host NGINX: `nginx -V` (full build info), package name and version, vendor changelog check for the October CVEs, master/worker start times vs package install time, `/proc//exe` target.\n- NPM or any other NGINX/OpenResty in containers: `docker exec  nginx -V` or `openresty -V`, image tag and digest, NPM app version (recorded separately from the NGINX build).\n- Configuration exposure (grep all configs, including NPM's generated configs inside its data volume, usually `data/nginx/proxy_host/*.conf`): `alias` combined with `rewrite` and `$request_filename`; `ssi on`; `aio` / `aio threads`; `listen ... quic` or `http3`; TLS session tickets/cache settings. Report which risky combinations exist, with file and line.\n\n### 5. Log and compromise review (window: $LOG_WINDOW_START to now)\n- PHP-FPM and PHP error logs: segfaults, \"exited on signal\", \"Allowed memory size ... exhausted\" spikes, unusual pool restarts.\n- NGINX/Apache error and access logs: worker crashes (signal 11), very large or malformed requests, unusual 5xx bursts, odd paths or user agents hitting PHP endpoints.\n- `journalctl -k` and `dmesg` for segfaults and OOM kills.\n- Light compromise indicators, read-only: recently modified PHP files in web roots and writable dirs (`storage/`, `public/`, uploads, `/tmp`), unexpected PHP files in upload dirs, new cron entries, new users or SSH keys (`authorized_keys` mtimes), unexpected outbound connections in `ss -tnp`.\n- Say exactly which logs you reviewed and their date coverage (rotated logs may limit the window).\n\n## Report format ($REPORT_PATH, Markdown)\n1. Executive summary: overall risk verdict, then one line per runtime (PHP, Node, Go, NGINX) with status: Patched and live / Patched on disk but old process still running / Not patched / Not present / Unknown.\n2. Internet exposure map: listening port, process, user, runtime and version, exposed publicly yes/no.\n3. Inventory table per runtime: location, owner/user, version, package or image, backport confirmed (yes/no/unknown), running processes using it, start time vs patch install time, status.\n4. The vhost \u2192 socket \u2192 pool \u2192 FPM version table from 1.3.\n5. Findings ordered by severity, each with the evidence (command and trimmed output, secrets redacted) and why it matters.\n6. NGINX configuration exposure details.\n7. Log and compromise review: what was checked, time window, anything suspicious.\n8. Recommended remediation steps, in priority order, written as exact commands I could run later. Do not run them.\n9. Gaps: what you could not check and why (permissions, missing tools, no network), and how I can close each gap.\n\nBe explicit about confidence. Never mark something as patched based only on a version file, a composer constraint or a CLI `php -v`; it counts only if the live process or binary is verified.\n\n## Primary sources\n- https://www.php.net/archive/2026.php#2026-10-21-5\n- https://nodejs.org/en/blog/vulnerability/october-2026-security-releases\n- https://pkg.go.dev/vuln/GO-2026-6809\n- https://go.dev/doc/devel/release\n- https://nginx.org/en/security_advisories.html\n- https://github.com/NginxProxyManager/nginx-proxy-manager/releases", "url": "https://gist.github.com/dansku/2132d01a7fc33e91ea57ff36e5c85fd0"}, {"timestamp": "2026-10-22T16:29:51Z", "date_only": false, "value": "2026-10-22T16:29:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T16:29:51Z", "date_only": false, "value": "2026-10-22T16:29:51+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T16:29:51Z", "date_only": false, "value": "2026-10-22T16:29:51+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T16:35:33Z", "date_only": false, "value": "2026-10-22T16:35:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T16:35:33Z", "date_only": false, "value": "2026-10-22T16:35:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T16:35:33Z", "date_only": false, "value": "2026-10-22T16:35:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T16:47:13Z", "date_only": false, "value": "2026-10-22T16:47:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/iamkunal9/c8dfee261642d5f6cebc0c66714951d2", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "2f433e8f-e657-4855-adb8-9c507252a592", "content": "You are auditing this repository **and this machine** for three issues from October 2026. Report\nfindings and propose a diff. **Do not commit**, **do not run fix commands**, and **do not do\nmajor-version bumps** without asking me first.\n\n## Part A: CVE-2026-111497, Node.js Brotli decoder RCE\n\nAn out-of-bounds write in the Brotli decoder bundled with Node.js (fixed 2026-10-21). Rated high; the\nproject says it allows code execution when a process decompresses **attacker-controlled Brotli** data.\nA public PoC exists (crash + memory leak on standard builds). There is no workaround: you have to upgrade.\n\n**Fixed versions:** Node **22.23.4**, **24.22.1**, **26.12.1**. Node **20.x and older are EOL and get no\nfix**, so they must move to a supported line. Upstream brotli C lib fixed in **1.2.1 / 1.1.1 / 1.0.10**.\nThe same Node releases also update Node's bundled roots to NSS 3.131.1, which drops emSign ECC Root CA - G3,\nfor Part B. (Node's per-key blocklist was still a draft when this was written.)\n\n1. **Find every Node.js version this repo runs on.** Check `.nvmrc`, `.node-version`, `.tool-versions`,\n   `package.json` `engines` / `volta` / `packageManager`, `Dockerfile*` (`FROM node:\u2026`, nvm/n installs),\n   CI (`actions/setup-node`, `node-version:` matrices), devcontainer / E2B / sandbox templates,\n   serverless runtime settings (`nodejs20.x`, Vercel/Netlify/Lambda configs). Report the file and line\n   for each. Flag anything below the fixed versions or on 20.x and older.\n2. **Check every Node install on this machine, not just the one on PATH.** Machines often have\n   several (nvm/fnm/volta/asdf/mise/n, Homebrew, system pkg), and tools like CLIs installed with\n   `npm i -g` run on whichever Node installed them. Run the fingerprint against each binary\n   (copy the block exactly; `EOF` must stay at column 0):\n\n```sh\nbash <<'EOF'\nFP=\"try{require('zlib').brotliDecompressSync(Buffer.from('200010414141fcffff07002228f00b60f7f41f000000','hex'))}catch(e){console.log(process.version,e.errno,e.errno===-17?'PATCHED':'VULNERABLE')}\"\nfor n in $(which -a node) ~/.nvm/versions/node/*/bin/node ~/.local/share/fnm/node-versions/*/installation/bin/node ~/.volta/tools/image/node/*/bin/node; do\n  [ -x \"$n\" ] && echo \"$n: $(\"$n\" -e \"$FP\")\"\ndone; true\nEOF\n```\n\n   (Windows: `where node` plus `nvm list`, then run the `-e` check for each.)\n   `-17 \u2026BLOCK_SWITCH` means **patched**. `-9 \u2026BLOCK_LENGTH_1` means **vulnerable**.\n   This is a fix fingerprint, not an exploit, so it is safe to run. Also report which install is the\n   default (`nvm alias default`, `brew list --versions node`), and whether the repo's `.nvmrc` pins a\n   vulnerable one. If you can run the Docker/CI image, run the same check inside it.\n3. **Map the exposure** (to decide priority; it does not change the upgrade). Look for:\n   - `zlib.brotliDecompress*`, `createBrotliDecompress`, `zlib.createUnzip`/`decompress` on untrusted input\n   - `fetch()` / `undici` / `axios` / `got` calls to URLs a user or third party controls; these auto-decode\n     `Content-Encoding: br`. Vercel's WAF rules cover inbound requests only, **not** responses you fetch.\n   - HTTP servers or middleware that decompress request bodies (`body-parser` with `inflate`,\n     `compression`, proxies, scrapers, crawlers, webhook receivers).\n4. **Other bundled Brotli copies** the same upstream fix may apply to. Mention them if present:\n   Bun (fix pending, oven-sh/bun#46352), Deno, Electron apps, Python `brotli`/`brotlicffi`, system\n   `libbrotli` in Docker images, C/C++ vendored brotli. Memory-safe ports (Rust `brotli-decompressor`,\n   Go `andybalholm/brotli`) can at worst panic or error; they cannot corrupt memory. Note them as low.\n\n## Part B: CVE-2026-111943, eMudhra CA keys computable from public certificates\n\nEight eMudhra intermediate CAs had weak keys: anyone can compute the private key from the public\ncertificate. Six are for TLS (**EM DV/OV/EV TLS CA - G3B/G3C**) and two are for code signing (**EM OV CS CA\n- G3B/G3C**). With them, an attacker who can intercept traffic (Wi-Fi, ISP, router/DNS, cloud network)\ncan forge a valid certificate for **any** domain. Each intermediate exists under **emSign Root TLS CA - G3**\n\u2192 **emSign ECC Root CA - G3**, and also cross-signed by Sectigo under **AAA Certificate Services**.\nBrowsers blocked them on Oct 17\u201320 through revocation. **Software with its own trust store and no\nrevocation checking still accepts forged chains**: Go, Python, Node, Java, Rust, curl/OpenSSL, containers.\nNo confirmed misuse so far.\n\n5. **Find trust stores this repo depends on**, report file and line, and flag stale ones:\n   - **Go:** `go.mod` `go`/`toolchain`, builder images (`FROM golang:`), CI `setup-go`. Needs **1.26.10 /\n     1.27.3** (1.25 and older get no fix) and a **rebuild** of every Go binary.\n   - **Python:** `certifi` in lockfiles/requirements; needs **\u2265 2026.10.19**.\n   - **Node:** same fixed versions as Part A. Also note `NODE_EXTRA_CA_CERTS` / `--use-openssl-ca`.\n   - **Rust:** `webpki-roots` **\u2265 1.0.10** in `Cargo.lock`. `rustls-native-certs` follows the OS store.\n   - **PHP:** `composer/ca-bundle` **\u2265 1.6.0 / 1.4.16**.\n   - **Java:** JDK `cacerts` (no fix listed yet). Report the JDK and vendor.\n   - **Container base images** (`ca-certificates`): Debian DSA-6572-1, Ubuntu USN-8944-1/2, RHEL\n     RHSB-2026-012 (workaround only), Amazon Linux 2023 issue #1147. Images must be rebuilt.\n   - **Vendored bundles** (`cacert.pem`, `ca-bundle.crt`, `*.pem` under the repo): run `check_store`\n     from step 7 on them.\n6. **Find code that terminates TLS and opens a new connection**: MITM / inspection proxies, scrapers,\n   API gateways, custom `ServerCertVerifier` / `VerifyPeerCertificate` / `checkServerIdentity`. The\n   browser's block never applies there, because the browser only sees the proxy's certificate. If the\n   code verifies origin certificates, it should reject chains containing the eight keys, as Go does\n   (SHA-256 SPKI list in golang/go commit 7f86f95763). Separately, flag `rejectUnauthorized: false`,\n   `InsecureSkipVerify`, `verify=False`: they are MITM-able with any certificate, eMudhra or not.\n7. **Check this machine's trust stores.** Copy the block exactly (`EOF` must stay at column 0); add\n   any vendored bundle from step 5 to the `for` list:\n\n```sh\nbash <<'EOF'\ncheck_store() {\n  subjects=$(openssl crl2pkcs7 -nocrl -certfile \"$1\" 2>/dev/null | openssl pkcs7 -print_certs -noout 2>/dev/null)\n  g3=$(grep -c \"CN *= *emSign ECC Root CA - G3$\" <<<\"$subjects\"); aaa=$(grep -c \"CN *= *AAA Certificate Services$\" <<<\"$subjects\")\n  if [ \"$g3\" -gt 0 ]; then echo \"EXPOSED (has emSign G3): $1\"\n  elif [ \"$aaa\" -gt 0 ]; then echo \"EXPOSED VIA CROSS-SIGN (has AAA, no G3) unless the runtime blocks the 8 keys itself: $1\"\n  else echo \"clean: $1\"; fi\n}\nfor b in /etc/ssl/certs/ca-certificates.crt /etc/pki/tls/certs/ca-bundle.crt /etc/ssl/cert.pem /opt/homebrew/etc/ca-certificates/cert.pem /usr/local/etc/ca-certificates/cert.pem \"$(python3 -c 'import certifi;print(certifi.where())' 2>/dev/null)\"; do\n  [ -f \"$b\" ] && check_store \"$b\"\ndone\n[ \"$(uname)\" = Darwin ] && security find-certificate -c \"emSign ECC Root CA - G3\" /System/Library/Keychains/SystemRootCertificates.keychain >/dev/null 2>&1 && echo \"macOS system keychain still lists emSign G3 (Safari/Apple TLS block the keys by revocation; other TLS stacks reading this store do not)\"\npython3 -c \"import certifi;print('certifi',certifi.__version__,'(need >= 2026.10.19)')\" 2>/dev/null\ngo version 2>/dev/null\njava -version 2>&1 | head -1\ntrue\nEOF\n```\n\n   Content beats version: judge a bundle by what it contains. **EXPOSED** means emSign G3 is still\n   trusted. **EXPOSED VIA CROSS-SIGN** means the root was dropped but AAA Certificate Services stays,\n   and the Sectigo cross-signs chain to it. That is only safe if the program reading the bundle blocks\n   the eight keys itself (Go \u2265 1.26.10 / 1.27.3, Composer ca-bundle \u2265 1.6.0 / 1.4.16). Otherwise\n   the fix is a runtime update where one exists, else note it as residual risk. On macOS,\n   `/etc/ssl/cert.pem` is SIP-protected: only a macOS update changes it, so don't propose editing it.\n8. **If this project runs websites:** check each production domain:\n   `openssl s_client -connect DOMAIN:443 -servername DOMAIN -showcerts /dev/null | grep -E 'emSign|EM (DV|OV|EV) TLS CA'`.\n   Any hit must be **replaced before Oct 27**, when Chrome removes emSign ECC Root CA - G3. If the\n   project ships binaries signed through **EM OV CS CA**, they need re-signing.\n9. **Do not \"fix\" this by removing AAA Certificate Services**, even when step 7 flags it. That root\n   also anchors many legitimate Sectigo sites. Remove only emSign ECC Root CA - G3, or block the eight keys.\n\n## Part C: CVE-2026-109618 / CVE-2026-109619 (\"PHP2Shell\"), PHP runtime RCE\n\nTwo bugs in PHP itself (CVSS 9.2), affecting nearly every version back to 5.4. A **single\nunauthenticated request** can give code execution or leak worker memory (other users' passwords,\ntokens, API keys), even on a \"Hello World\" page. **Exploitation attempts are already seen in the wild.**\nAffects mod_php (worst), PHP-FPM, php-cgi, FrankenPHP and LiteSpeed. Skip this part if there is no PHP.\n\n**Fixed versions:** **8.5.12**, **8.4.27**, **8.3.36**, **8.2.35**. PHP 8.1 and older get no official fix\n(source backports exist for 7.4/8.0/8.1), so move to a supported branch.\n\n10. **Find PHP in the repo:** `composer.json` (`require.php`, `config.platform.php`), `Dockerfile*`\n    (`FROM php:`, `FROM dunglas/frankenphp`, `apt/apk install php*`), CI `setup-php`, and hosting configs.\n    Flag anything below the fixed versions.\n11. **Check the PHP actually running** (machine, containers, servers): `php -v`, and for distro packages\n    look for the CVE in the changelog, since distros backport under old version numbers\n    (`apt changelog php8.x-fpm | grep -E 'CVE-2026-10961[89]'` or `rpm -q --changelog php | grep -E 'CVE-2026-10961[89]'`).\n12. **If you can't upgrade right away**, propose these stopgaps (not full fixes):\n    `session.upload_progress.enabled=0` (then restart all workers), `memory_limit=-1`, a low\n    `post_max_size` plus a request-size limit at the web server or proxy, and on 8.5 `fatal_error_backtraces=0`.\n    After upgrading, check memory settings: the fix adds a hard memory limit that kills the process.\n13. **If the server was exposed before patching**, look for signs of attack: odd multipart requests followed\n    by memory-limit errors or bursts of HTTP 500, very large `PHPSESSID` cookies, unexplained worker restarts.\n    If you find any, rotate the secrets the app handles.\n\n## Output\n\nThree short tables (add a **PHP** row to the repo and machine tables if PHP is present), then a minimal proposed diff (pins, lockfile bumps, base images, `.nvmrc`):\n- **Repo:** issue (A/B), location (file:line), current version, fixed target, exposed path\n  (yes/no/unknown), priority.\n- **Machine, Node:** each Node binary, its version, PATCHED/VULNERABLE, and whether it is the default.\n- **Machine, trust stores:** each bundle/runtime, EXPOSED / EXPOSED VIA CROSS-SIGN / clean or version,\n  and fix.\n\nPropose fix commands (e.g. `nvm install 24.22.1 && nvm alias default 24.22.1`, `brew upgrade node go\ncertifi ca-certificates`, distro `ca-certificates` update, `nvm uninstall `). **Ask before running\nthem**, and especially before uninstalling anything. Remind me that already-open terminals keep the old\nNode until reopened, and that Go binaries and container images must be rebuilt to pick up fixes.\n\nSources:\n- https://thehackernews.com/2026/10/nodejs-brotli-decoder-bug-could-allow.html\n- https://vercel.com/kb/bulletin/node-js-security-advisory\n- https://github.com/oven-sh/bun/issues/46352\n- https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html\n- https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/\n- https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/\n- https://access.redhat.com/security/vulnerabilities/RHSB-2026-012\n- https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html\n", "url": "https://gist.github.com/iamkunal9/c8dfee261642d5f6cebc0c66714951d2"}, {"timestamp": "2026-10-22T17:06:20Z", "date_only": false, "value": "2026-10-22T17:06:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T17:06:20Z", "date_only": false, "value": "2026-10-22T17:06:20+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T17:06:20Z", "date_only": false, "value": "2026-10-22T17:06:20+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T17:14:30Z", "date_only": false, "value": "2026-10-22T17:14:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T17:14:30Z", "date_only": false, "value": "2026-10-22T17:14:30+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T17:14:30Z", "date_only": false, "value": "2026-10-22T17:14:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T17:45:32Z", "date_only": false, "value": "2026-10-22T17:45:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T17:45:32Z", "date_only": false, "value": "2026-10-22T17:45:32+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T17:45:32Z", "date_only": false, "value": "2026-10-22T17:45:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T18:38:23Z", "date_only": false, "value": "2026-10-22T18:38:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T18:38:23Z", "date_only": false, "value": "2026-10-22T18:38:23+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T18:38:23Z", "date_only": false, "value": "2026-10-22T18:38:23+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T18:41:26Z", "date_only": false, "value": "2026-10-22T18:41:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T18:41:26Z", "date_only": false, "value": "2026-10-22T18:41:26+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T18:41:26Z", "date_only": false, "value": "2026-10-22T18:41:26+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T18:43:36Z", "date_only": false, "value": "2026-10-22T18:43:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T18:43:36Z", "date_only": false, "value": "2026-10-22T18:43:36+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T18:43:36Z", "date_only": false, "value": "2026-10-22T18:43:36+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T18:48:12Z", "date_only": false, "value": "2026-10-22T18:48:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T18:48:12Z", "date_only": false, "value": "2026-10-22T18:48:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T18:48:12Z", "date_only": false, "value": "2026-10-22T18:48:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T22:03:46Z", "date_only": false, "value": "2026-10-22T22:03:46Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88262", "record": "ALSA-2026:88262", "field": "modified"}, {"timestamp": "2026-10-22T23:18:18Z", "date_only": false, "value": "2026-10-22T23:18:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T23:18:26Z", "date_only": false, "value": "2026-10-22T23:18:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12236-1", "record": "OPENSUSE-SU-2026:12236-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12238-1", "record": "OPENSUSE-SU-2026:12238-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12239-1", "record": "OPENSUSE-SU-2026:12239-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12253-1", "record": "OPENSUSE-SU-2026:12253-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12236-1", "record": "OPENSUSE-SU-2026:12236-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12238-1", "record": "OPENSUSE-SU-2026:12238-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12239-1", "record": "OPENSUSE-SU-2026:12239-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12253-1", "record": "OPENSUSE-SU-2026:12253-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12236-1", "record": "OPENSUSE-SU-2026:12236-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12238-1", "record": "OPENSUSE-SU-2026:12238-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12239-1", "record": "OPENSUSE-SU-2026:12239-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12253-1", "record": "OPENSUSE-SU-2026:12253-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12236-1", "record": "OPENSUSE-SU-2026:12236-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12238-1", "record": "OPENSUSE-SU-2026:12238-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12239-1", "record": "OPENSUSE-SU-2026:12239-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12253-1", "record": "OPENSUSE-SU-2026:12253-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-111943", "record": "UBUNTU-CVE-2026-111943", "field": "published"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-111943", "record": "UBUNTU-CVE-2026-111943", "field": "modified"}, {"timestamp": "2026-10-23T00:37:48.594Z", "date_only": false, "value": "2026-10-23T00:37:48.594029Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UU37609", "record": "CLEANSTART-2026-UU37609", "field": "published"}, {"timestamp": "2026-10-23T06:38:35.446Z", "date_only": false, "value": "2026-10-23T06:38:35.446311Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-111943", "record": "BELL-CVE-2026-111943", "field": "modified"}, {"timestamp": "2026-10-23T06:42:37.217Z", "date_only": false, "value": "2026-10-23T06:42:37.217759Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88188", "record": "RLSA-2026:88188", "field": "published"}, {"timestamp": "2026-10-23T06:42:37.217Z", "date_only": false, "value": "2026-10-23T06:42:37.217759Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88189", "record": "RLSA-2026:88189", "field": "published"}, {"timestamp": "2026-10-23T06:45:29.064Z", "date_only": false, "value": "2026-10-23T06:45:29.064378Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88354", "record": "RLSA-2026:88354", "field": "published"}, {"timestamp": "2026-10-23T08:19:27Z", "date_only": false, "value": "2026-10-23T08:19:27Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-4530", "record": "OESA-2026-4530", "field": "published"}, {"timestamp": "2026-10-23T08:19:27Z", "date_only": false, "value": "2026-10-23T08:19:27Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-4530", "record": "OESA-2026-4530", "field": "modified"}, {"timestamp": "2026-10-23T08:44:29Z", "date_only": false, "value": "2026-10-23T08:44:29Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YN76474", "record": "CLEANSTART-2026-YN76474", "field": "modified"}, {"timestamp": "2026-10-23T09:44:45Z", "date_only": false, "value": "2026-10-23T09:44:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12226-1", "record": "OPENSUSE-SU-2026:12226-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-23T09:44:45Z", "date_only": false, "value": "2026-10-23T09:44:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12226-1", "record": "OPENSUSE-SU-2026:12226-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-23T10:40:50Z", "date_only": false, "value": "2026-10-23T10:40:50Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:86196", "record": "ALSA-2026:86196", "field": "modified"}, {"timestamp": "2026-10-23T10:42:31Z", "date_only": false, "value": "2026-10-23T10:42:31Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:86203", "record": "ALSA-2026:86203", "field": "modified"}, {"timestamp": "2026-10-23T10:52:41Z", "date_only": false, "value": "2026-10-23T10:52:41Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:86093", "record": "ALSA-2026:86093", "field": "modified"}, {"timestamp": "2026-10-23T12:11:02.998Z", "date_only": false, "value": "2026-10-23T12:11:02.998013Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88262", "record": "RLSA-2026:88262", "field": "published"}, {"timestamp": "2026-10-23T12:11:02.998Z", "date_only": false, "value": "2026-10-23T12:11:02.998013Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88280", "record": "RLSA-2026:88280", "field": "published"}, {"timestamp": "2026-10-23T12:11:02.998Z", "date_only": false, "value": "2026-10-23T12:11:02.998013Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88316", "record": "RLSA-2026:88316", "field": "published"}, {"timestamp": "2026-10-23T12:11:02.998Z", "date_only": false, "value": "2026-10-23T12:11:02.998013Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:88336", "record": "RLSA-2026:88336", "field": "published"}, {"timestamp": "2026-10-23T12:19:35Z", "date_only": false, "value": "2026-10-23T12:19:35Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88316", "record": "ALSA-2026:88316", "field": "modified"}, {"timestamp": "2026-10-23T12:19:40Z", "date_only": false, "value": "2026-10-23T12:19:40Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88336", "record": "ALSA-2026:88336", "field": "modified"}, {"timestamp": "2026-10-23T12:20:57Z", "date_only": false, "value": "2026-10-23T12:20:57Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88354", "record": "ALSA-2026:88354", "field": "modified"}, {"timestamp": "2026-10-23T14:19:34.160Z", "date_only": false, "value": "2026-10-23T14:19:34.160340Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-3e72e79a-c571695ffd7e8052", "record": "cve-2026-111943", "field": "creation_timestamp", "uuid": "e403fbf0-4fcd-4dd5-a622-ef41109afd97", "content": "This Week in Security: Record Patch Tuesday, PHP\u2019s Bad Time, The Oldest Vuln, AI Armies, and More\nIt\u2019s no longer a proper month without Microsoft breaking its own record for security fixes, and October\u2019s Patch Tuesday was no exception. Brian Krebs brings the roundup: more than 1,400 vulnerabilities fixed in a single batch, dwarfing September\u2019s record of nearly 1,000, which itself was about ten times the normal monthly load. According to Tenable, Microsoft has now passed 4,000 CVEs for the year with two months still to go.\nOnly one of the fixes is for a vulnerability already being exploited in the wild: CVE-2026-96951, a security feature bypass in the Windows Shell affecting Windows 10, 11, and some Server versions. A .NET Framework bypass, CVE-2026-108398, was publicly disclosed before the patch, giving attackers a head start, and with modern AI tooling, it seems like not much of a head start is needed. At least 78 of the bugs are rated critical, and most of those allow remote code execution with little or no user interaction. Windows 10 holdouts can relax a little: Microsoft quietly extended free updates through October 2027.  Given the pace of exploitation, this is probably the only way to prevent an Internet-scale meltdown.\nMicrosoft credits LLM-driven bug hunting for the volume, which leaves the poor admins who have to test and deploy all of this in an unenviable spot. Fortra\u2019s analysis shows that only 26 Microsoft vulnerabilities have landed in the CISA KEV catalog of actively exploited bugs so far this year, so start there. For the rest, the SANS Internet Storm Center and Cisco Talos have the usual breakdowns by severity. Or, you know, just patch everything and hope for the best, which is roughly what everyone does anyhow.\nThe CA private key is\u2026 4\nOriginally I was calling this the \u201cbig one\u201d for the week, but this week that just keeps on giving. The private keys for eight eMudhra intermediate certificates have been compromised, and the way they were compromised is going to be a security talk punchline for years.  Remember the Debian SSL and SSH key debacle?  Of that scale.\nSome background first. When your browser connects to a website over HTTPS, the site presents a certificate saying \u201cI am example.com\u201d, signed by a Certificate Authority (CA). Your browser and OS ship with a list of trusted root CAs, but roots are too valuable to use day to day, so they sign intermediate certificates, and the intermediates sign the actual website certificates. Whoever holds an intermediate\u2019s private key can mint a certificate for any website, and every client that trusts the root will believe it. The whole system depends on those keys staying secret, and on them being generated properly in the first place.\neMudhra, an Indian CA which sells certificates under the emSign brand, had six TLS intermediates and two code-signing intermediates chaining to the emSign ECC Root CA \u2013 G3, which is trusted by Chrome and Apple, and Mozilla. A researcher identified only as Wayne proved the keys were compromised by signing the message \u201cWe have a problem here \u2013 Wayne\u201d with each of them and sending it to the root programs.\nHow did Wayne get the keys? Fl\u00fcpke posted one on Mastodon, and the secret value for the \u201cEM OV TLS CA \u2013 G3C\u201d key is\u2026 4. Not four followed by 380 bits of randomness: the integer four. A reply quickly brute-forced the rest, and they\u2019re all equally tiny: 56, 230, 237, 115, 155, 156, and 66. The keys were \u201cincorrectly generated by the CA\u201d, and anyone could recover them from the public certificates, which has been true since they were created in April 2025.\nThe browsers moved fast. According to The Hacker News, Chrome pushed a block within two hours of the report, and Mozilla blocked the certificates in under three, pulled the root from NSS, and shipped Firefox updates (CVE-2026-113470) for anyone with automatic updates disabled. There are no Certificate Transparency logs of rogue certificates, so modern browsers were never at risk. Everything that isn\u2019t a browser is going to be the real problem and the extremely long tail of this fault: plenty of software never checks for revoked certificates and keeps trusting these keys until its bundled root list is updated.\nGo hard-coded the eight bad keys into its standard library (CVE-2026-111943), but as Penligent points out, that only protects Go programs once they\u2019re rebuilt with the new release. Python, Rust, Java, Node.js, curl, and most Linux distributions have updated root bundles, and the we-have-a-problem.com site has a full list, a checker, and manual workarounds for macOS, whose built-in curl and git don\u2019t check revocation. There are also fixes for Linux, Windows, and the BSDs. Update everything, then go rebuild everything you compiled yourself. And then wonder how you\u2019re going to update appliances, IoT devices, cameras, and everything else that fetches code over HTTPS or SSL.\nphp2shell: PHP gets owned by running out of memory\nPHP, the language behind a significant percentage of the web had a rough week. WordPress, Drupal, Magento, phpMyAdmin, and just about every hosting control panel, major ecommerce sites, home project blogs, and even Hackaday itself was potentially impacted. Details of two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked onto Hacker News a day ahead of the embargo, and Huntress covers the scramble that followed as PHP rushed its release out early. Now that patches are available, Ryan Austin of Calif has published the full writeup, demonstrating pre-authentication remote code execution against important apps on default configurations, in PHP versions back to 5.4.0. That\u2019s over a decade of PHP.\nThe trick is an old one, first found by Stefan Esser back in 2004. PHP enforces a memory limit for each request, and when a request exceeds it, PHP stops immediately with a fatal error. If that happens in the middle of native code updating some internal structure, the structure is left half-built, and the cleanup code that runs afterward trusts it anyhow. That\u2019s a classic \u201cuse-after-free\u201d style bug, where the program uses memory that\u2019s already been released or was never properly set up, and those are frequently exploitable. Calif found ways to reliably push a request over the memory limit at exactly the right moment (deeply nested empty file uploads turn out to balloon into hundreds of megabytes of internal tables, while staying under PHP\u2019s upload size limits), and three different places where the interruption leaves a dangerous mess. Austin found the first bug with a generally available LLM, but only because he knew PHP\u2019s twenty-year history of memory-limit bugs well enough to point it in the right direction.\nAmazon reports that its honeypots caught a php2shell exploitation attempt on October 17th, four days before the embargo lifted, and that it\u2019s now being broadly exploited. Their advice is worth repeating: for critical bugs on internet-facing systems, measure your patch window in hours, not weeks, and start investigating from the earliest exploitation date, not the disclosure date. If you can\u2019t patch right now, Calif suggests disabling session.upload_progress and removing the memory limit, which comes with its own obvious problems.\nOne word of caution: alongside the legitimate writeups, there are many self-published \u201ccorrected findings\u201d and \u201cproof-of-concept\u201d posts that can\u2019t seem to decide whether their own exploit works, while offering a downloadable \u201cweaponized\u201d bundle. A leaked-bug panic is the perfect time to hand anxious admins a zip file. Read the real advisories, and don\u2019t run random proof-of-concept bundles.\nA Sixteen-year-old forever-day in Broadcom WiFi\nQuentin Kaiser has the long-form writeup of his Hexacon talk on a bug in Broadcom\u2019s WiFi stack, present since at least 2010, which gives an attacker a root shell on a router from across the street.  So called \u201cparking lot\u201d attacks that can happen from someone not even on your property have long been the boogeymen of WiFi security, and it\u2019s been a little bit since we\u2019ve gotten a new one.\nThe bug lives in WPS, WiFi Protected Setup: the \u201cpush the button on your router and then on your printer\u201d pairing system that was supposed to save people from typing long WiFi passwords. WPS has a long and spotty security history, and this bug can be triggered over the air without knowing the network password, and without completing a WPS pairing. Kaiser\u2019s demos show him pulling the WiFi password straight out of a router\u2019s settings and sending it back over WiFi, and getting a fully interactive remote shell carried entirely over WiFi frames. No Internet connection required.\nThe really grim part is the patch history. Broadcom quietly released an incomplete fix in 2018, then suggested vendors switch to the open-source hostapd instead. For the older eCos-based chipsets that\u2019s effectively never going to happen, which makes it a permanent \u201cforever-day\u201d. Broadcom refused to assign a CVE, and because Broadcom is its own CVE authority, CERT/CC closed Kaiser\u2019s case the same day it was opened.\nAs of disclosure, the cable and DSL gateways he tested from three of Belgium\u2019s four major ISPs were still vulnerable, and his napkin math puts it at over a million and a half devices in Belgium alone. Broadcom chips are, of course, sold everywhere. If you\u2019re running ISP-provided hardware, there isn\u2019t much you can do about the firmware. Turning off WPS can\u2019t hurt if your router allows it, although Kaiser doesn\u2019t say whether that blocks the attack. Disabling the gateway\u2019s own WiFi and running your own access point that you can actually update is the safer bet.\nGitLab regex bug reaches back twelve years\nGitLab has released fixes for CVE-2026-110264, a maximum-severity CVSS 10.0 bug allowing unauthenticated attackers to run code on self-hosted GitLab servers. The flaw is an integer overflow when compiling a specially crafted regular expression in Onigmo, the Ruby regex engine which GitLab bundles into its own packages, so it affects every version back to GitLab 7.0 in 2014.\nThis is the fourth regex engine code execution bug from the same researcher in about a month (after CVE-2026-97229, CVE-2026-93577, and CVE-2026-89078), and comes with a nasty gotcha: the new fixed versions are one release past the October 12th fix, so if you diligently patched nine days ago, you\u2019re vulnerable again. GitLab hasn\u2019t said what\u2019s needed to trigger the bug, so there\u2019s no configuration workaround. If you\u2019re running GitLab at home or in the shop, patch, and budget for some downtime while the database migrations run.\nNode.js Brotli bug\nNode.js shipped security updates for the 22, 24, and 26 branches, headlined by CVE-2026-111497, an out-of-bounds write in the bundled Brotli decompression library. Vercel\u2019s advisory notes that researchers have demonstrated both memory leaks and command execution.\nNode doesn\u2019t decompress Brotli data on its own, but plenty of applications and libraries do, whether on incoming requests or on responses fetched from other servers. Vercel deployed firewall rules for traffic coming into its own platform, but no firewall can protect your code from a malicious response it goes and fetches itself. Node 20 is end-of-life and won\u2019t be fixed. As a bonus, the same releases carry the eMudhra certificate distrust, so that\u2019s two reasons to go update.\nHeader accordions and HTTP/3\nHTTP/3 is the newest version of the protocol behind the web, running over QUIC (a UDP-based transport) instead of TCP. To save bandwidth, it compresses request headers using a scheme called QPACK: common headers can be sent as a one-byte reference into a table instead of the full text. Compression is great for bandwidth, but any time a small input can turn into a big output, there\u2019s a risk of a \u201cdecompression bomb\u201d.  Similar tricks resulted in \u201czip bombs\u201d in the 2000s, and what\u2019s old is new again.\nFoxIO found exactly that in seven of the ten HTTP/3 implementations they tested. One approach packs about 160,000 unique short headers into a single 1MB request; another stores one 4KB header and then references it thousands of times, a 4000-to-1 amplification. The HTTP/3 spec already says how to limit the decoded size, but implementations got it wrong in every possible way: checking only the compressed size, decompressing everything before checking, ignoring the per-header overhead, or reading the limit setting and then never enforcing it.\nFixed so far are quic-go (CVE-2025-64702), which is used by Caddy, Traefik, and Cloudflare\u2019s tunnels; Cloudflare\u2019s quiche (CVE-2026-12523); lsquic 4.9.0; and even Wireshark (CVE-2025-13945), whose QPACK decoder crashed during testing. Bun, the hyperium h3 Rust crate, and aioquic/mitmproxy remain unpatched. Bun gets special mention for an integer overflow that turns a single 516KB request into a permanent 100% CPU infinite loop. The lesson applies to any compression format: limit the decompressed size as you go, not just the bytes on the wire.\nMetamorphic macOS ransomware\nPatrick Wardle of Objective-See digs into Heartbreaker, macOS ransomware written in Rust that has sat on VirusTotal since May 2025, undetected by every antivirus engine.\nMost antivirus detection relies on signatures: a hash or byte pattern identifying a known-bad file. Metamorphic malware tries to dodge signatures by rewriting itself so every copy looks different while behaving the same. Heartbreaker takes a delightfully brute-force approach: it carries its own Rust source code inside the binary, and after running, it shuffles variable names, adds junk functions, installs a Rust compiler if one isn\u2019t present, recompiles itself, and replaces itself with the new build. It is about as subtle as a brick through a window.\nAs ransomware it\u2019s not very scary. It only encrypts the Downloads folder, and uses the same hard-coded key for every victim, so Wardle simply wrote a decryptor. The rebuilding also depends on a GitHub library which has since disappeared, so it mostly fails anyhow. Wardle uses it to demonstrate his free RansomWhere? tool, which ignores signatures completely and instead watches for an untrusted process rapidly writing files that look encrypted (using a bit of entropy math). The malware can change its hash all day long, but to ransom anything it still has to encrypt the files, and that\u2019s much harder to disguise.\nUpdraftPlus vendor breached\nTeamUpdraft, the company behind the very popular UpdraftPlus WordPress backup plugin, disclosed a breach of their customer database over the weekend. Names, emails, addresses, hashed passwords, and two-factor authentication settings were taken, and more worryingly, the connection keys for UpdraftCentral, their cloud dashboard for managing many WordPress sites at once. UpdraftPlus previously made an appearance back in June, when a vulnerability in the plugin was used in the Awesome Motive supply chain attack.\nThose UpdraftCentral keys can send commands to every connected site, which turns one vendor breach into a remote control for potentially thousands of customer websites. TeamUpdraft has released UpdraftPlus 1.26.12 and 2.26.12, which automatically disconnect the old keys. If you or anyone you know manages WordPress sites through UpdraftCentral, log in to each site directly, update the plugin, and check for unexpected admin accounts and plugins (including the easy-to-miss \u201cMust-Use\u201d plugins tab).\nSpyware delivered by ad network\nCitizen Lab has published research showing that the Israeli ad-tech company Discover-Tech helped deliver spyware through ordinary online ads, targeting at least 45 devices at the news outlet Al Jazeera in 2024 and 2025. Citizen Lab attributes the spyware to Candiru, a commercial spyware vendor.\nWhen you load a web page with ads, the ad slot is typically auctioned off in real time to the highest bidder, based on a profile of who you seem to be. This \u201cprogrammatic advertising\u201d system is, by design, a mechanism for running third-party content on a very specific person\u2019s device. It\u2019s easy to see why that\u2019s attractive to a spyware vendor. According to Citizen Lab, Discover-Tech\u2019s platform could profile users and infect a device just by displaying an ad, no click required. CPJ reports that the company\u2019s ads reached nearly 200,000 websites and apps, and researchers at Confiant found them on government networks including the US Department of Defense, NATO, and the UN.\nMalicious ads are nothing new, but this is the first public evidence of an ad platform being used for targeted, zero-click spyware delivery. \u201cDon\u2019t click on ads\u201d has always been good advice. An ad blocker isn\u2019t just a quality-of-life improvement; it\u2019s attack surface reduction.\nRansomware negotiators on the wrong side\nLast week we covered a ransomware \u201crecovery\u201d CEO charged with secretly paying ransoms while billing customers for decryption. This week, Brian Krebs reports that investigators chasing ShinyHunters (the group behind the FBI hack) have identified executives at two ransomware negotiation firms with unusually friendly relationships with the gang. Chats seized when Dutch police arrested a suspected ShinyHunters member reportedly show negotiators who knew about new victims before the victims themselves did. One Canadian executive has already been arrested, and investigators believe an executive at an unnamed, prestigious US consulting firm helped run the gang\u2019s extortion website.\nIt\u2019s not the first time: the DOJ sentenced Florida negotiator Angelo Martino to 70 months in July for feeding his own clients\u2019 negotiating positions to the BlackCat ransomware gang, and for helping deploy ransomware against even more victims. The government seized $10 million in assets from him, including a luxury fishing boat and, for reasons unknown, a food truck.\nPart of the problem is structural. Some negotiation firms charge a percentage of the ransom paid, which gives the \u201cnegotiator\u201d every incentive to pay, and pay big. Firms which refuse to facilitate payments often just get swapped out by the insurance company for ones that will. Meanwhile, ShinyHunters is reportedly furious with Coveware, an incident response firm, for telling victims not to pay, which is probably the best endorsement Coveware could ask for.\nAn army of AI agents\nThe Verge reports that security firm Norforge found an attacker using a swarm of mostly autonomous AI agents to break into more than 100 websites, including sites belonging to John Deere, SharkNinja, and Cummins. The agents ran on Cairn, an open-source \u201cgeneral-purpose problem-solving engine\u201d: you give it a starting point and a goal, and the agents work toward it while documenting their progress. That documentation is how they were caught: the attacker\u2019s Cairn instance was exposed to the Internet, along with about 20 others that appear malicious.\nAccording to Reuters, the attacker described their preferred intrusion tactics in fewer than 100 Chinese characters, and each successful breach took about 23 hours. The victims say the impacted sites were standalone support pages, and Cairn\u2019s author insists it was \u201cnever a \u2018hacking tool'\u201d. Many tools can be double-edged, but the effort balance here is hard to ignore: a short prompt and a day of waiting on one side, and defenders who have to close every hole on the other.\nStaples hacked to fund a gift cards\n404 Media pieced together, from an unsealed search warrant, that a Chinese organized crime ring hacked Staples in 2023 and issued more than 15,000 gift cards worth over $5 million. Staples\u2019 internal customer support system was supposed to be reachable only from inside the company, but wasn\u2019t. The attackers requested \u201cheap dumps\u201d, a debugging feature which captures everything an application has in memory, and pulled out the active login sessions of customer service reps. With those, they simply logged in as the reps and issued gift cards.  A similar trick was used in a hack of payment data from Target years ago, where attackers leveraged access through the air conditioner control network into the cash register network, and then dumped credit cards directly from RAM as they were processed.\nIf you\u2019ve ever wondered why debugging endpoints left exposed in production show up in every penetration test report, this is why. The gift cards were then laundered the old-fashioned way: crews of shoppers hitting Target stores with phones full of gift cards, buying Apple and Bose gear by the cartload (about $141,000 across 85 Target stores in 18 states in two days), with the goods shipped back to China. The larger ring this fed into reportedly moved over $100 million in gift cards.\nPingCAP breach claims\nAn extortion group calling itself FulcrumSec has posted a leak site claiming a massive breach of PingCAP, makers of the TiDB Cloud managed database service. The group claims it found cloud credentials committed to PingCAP\u2019s own source code repositories, and used them to set up a replication feed of PingCAP\u2019s production control database that re-exported everything to the attackers every six hours for 22 days, without being noticed.\nThe claims haven\u2019t been independently verified, but they\u2019re very specific: 10.6TB of data, 115,000 customer API keys stored in plaintext, 20 million customer SQL queries, four years of connection logs with customer IP addresses, and 413 private source repositories. The attackers quote a 2022 internal security ticket noting that any member of a customer organization, even a billing-only account, could reset the root password on every database in that organization. Perhaps most damaging, support engineers allegedly pasted live customer credentials into support tickets, including cloud keys with admin access to other companies\u2019 storage. If you\u2019re a TiDB Cloud customer, assume your API keys, connection strings, and anything ever pasted into a support ticket are burned, and rotate accordingly.\nFake WhatsApp on the Play Store\nAndroid Authority found a fake WhatsApp app on Google Play with over half a million downloads, a week after a fake Chrome app racked up over 100,000. The fake copied the real listing\u2019s screenshots and description word for word, and in some cases appeared as a sponsored result when searching for the real app.\nThe trick that let it linger is Google Play\u2019s \u201cEarly Access\u201d program, which disables public reviews. Normally a fake app gets buried in one-star \u201cTHIS IS A SCAM\u201d reviews; in Early Access, nobody can see them. As of publication it was still available. \u201cOnly install from the official store\u201d is still good advice for family members, but it\u2019s a little less reassuring when the official store is selling ad placement to the fake.\nMeta Muse leaks via DNS\nBack in September, we covered a serious vulnerability in Muse, Meta\u2019s extremely privileged AI agent. This week, Meta suspended Muse\u2019s chat sharing feature after researchers at Claroc found they could find and read thousands of shared conversations.\nEach shared chat got its own web address, with the conversation title as part of the hostname. Hostnames get looked up in DNS, and many DNS lookups are recorded by \u201cpassive DNS\u201d services, essentially a giant searchable history of which names have been resolved. One search returned a ready-made table of contents of shared chats. Claroc found 6,800 of them, including a small business loan application, a bank fraud alert with partial account details, and internal company documents. \u201cSecret URL\u201d sharing only works if the URL stays secret, and putting the secret in a DNS hostname is roughly the opposite of that.\nPassword1 strikes again\nThe UK Information Commissioner\u2019s Office reprimanded IT provider Ogi Networks and the Welsh public sector data organization Data Cymru over a 2024 ransomware attack which exposed data on 3,300 people, most of them children. The way in? A test account named \u201cTest2\u201d, created in 2012, never reviewed, and protected with the password \u201cPassword1\u201d. The local administrator accounts on three systems also shared a single password for the same twelve years.\nThere\u2019s nothing exotic here, sadly. Old accounts nobody remembers, passwords that would fall to the first guess of any automated tool, and an outsourcing arrangement where each side assumed the other was handling security. None of it makes for exciting headlines, but these are the things that keep causing very real breaches.\nTrezor wallets also implanted\nAs a follow-up to last week\u2019s coverage of hardware implants in Ledger crypto wallets, Kim Zetter reports that Trezor\u2019s claim of \u201cnot a single piece of evidence\u201d that its devices were compromised doesn\u2019t quite line up with reality. Joe Grand found implants in two Trezor wallets, bought through Facebook Marketplace and a TikTok shop, and reported them to Trezor in August.\nThe Trezor attack is different from the Ledger implant. Instead of adding a radio to spy on the screen, the attackers replaced the main microcontroller with one running modified (open source) firmware. The firmware \u201crandomly\u201d generates one of a dozen recovery phrases the attackers already know. To pass Trezor\u2019s integrity checks, it presents a copy of the legitimate firmware for verification before switching to the malicious code. The takeaway hasn\u2019t changed from last week: buy only directly from the vendor, and if you\u2019re holding enough crypto to make this worth someone\u2019s while, consider whether you can really trust any single device.\nNGINX gets more critical bugs\nF5 has released out-of-band (meaning outside their normal patch schedule) updates for three critical vulnerabilities in NGINX, the web server and reverse proxy that sits in front of a huge chunk of the Internet, and quite possibly in front of the services on your home lab. The Cyber Security Agency of Singapore has a summary: all three are rated CVSS 9.2, can be triggered remotely without authentication, and can crash worker processes or, under the right conditions, allow remote code execution.\nThe bugs are CVE-2026-15176, a heap overflow in the \u201calias\u201d and \u201crewrite\u201d directives; CVE-2026-97205, a use-after-free in asynchronous file I/O combined with Server Side Includes; and CVE-2026-93479, a heap overflow in the \u201cmap\u201d directive. Code execution requires the vulnerable configuration to be in use, and requires bypassing ASLR (the randomization of memory layout which makes exploits harder to aim). Affected versions include NGINX Open Source 1.30.5 and below and 1.31.6 and below, NGINX Plus R33 through R37, and a long list of F5\u2019s NGINX-based products, including the Kubernetes Ingress Controller.\nBack in May we covered \u201cnginx-poolslip\u201d, where the suggested mitigation was to avoid unnamed regex capture groups in rewrite rules. The mitigation for the \u201cmap\u201d bug this time? Use named captures instead of unnamed captures. If you\u2019ve been putting off cleaning up those \u201c$1\u201d references in your config, now\u2019s the time. For the other two, avoid \u201calias\u201d inside \u201clocation\u201d blocks (and the \u201c$request_filename\u201d variable), or disable AIO or SSI, until you can update.\nLinux kernel bugs posted to the wrong list\nNormally, security bugs in the Linux kernel are reported privately to the kernel security team, which coordinates a fix before details go public. This is \u201ccoordinated disclosure\u201d: the bug and fix are published together, ideally giving admins a chance to patch before attackers can start writing exploits. The Linux Kernel Mailing List (LKML), on the other hand, is about as public as it gets.\nPhoronix reports that Trend Micro\u2019s Zero Day Initiative, seemingly by accident, sent a batch of unpatched vulnerability reports straight to LKML. Greg Kroah-Hartman replied to each report asking about the choice of mailing list, which I can only imagine was done with remarkable restraint. The most serious two are both CVSS 9.0 remote code execution bugs in ksmbd, the kernel\u2019s built-in SMB (Windows file sharing) server: an integer underflow in SMB Direct, and a race condition. The rest include local privilege escalation bugs in the networking code, the VMware graphics driver (an out-of-bounds write), and a stack overflow in search-domain TCP query handling, plus an information leak in the NVMe-over-fabrics target code.\nSome of the bugs already have patches being tested or queued for future kernel releases, and those will presumably be expedited now. Most systems don\u2019t run ksmbd (the userspace Samba server is far more common), but if you\u2019ve enabled it on a NAS or a home server, it\u2019s worth disabling until patched kernels land. As Phoronix puts it: \u201cthe bug and security reports keep on coming in the AI fueled world.\u201d \nhackaday.com/2026/10/23/this-w\u2026RE: chaos.social/users/fluepke/sta\u2026", "url": "https://poliverso.org/objects/0477a01e-3e72e79a-c571695ffd7e8052"}, {"timestamp": "2026-10-23T17:58:04Z", "date_only": false, "value": "2026-10-23T17:58:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22152-1", "record": "OPENSUSE-SU-2026:22152-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-23T17:58:04Z", "date_only": false, "value": "2026-10-23T17:58:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22152-1", "record": "OPENSUSE-SU-2026:22152-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-23T17:58:05Z", "date_only": false, "value": "2026-10-23T17:58:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22153-1", "record": "OPENSUSE-SU-2026:22153-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-23T17:58:05Z", "date_only": false, "value": "2026-10-23T17:58:05Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:22153-1", "record": "OPENSUSE-SU-2026:22153-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-23T19:32:50Z", "date_only": false, "value": "2026-10-23T19:32:50Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88188", "record": "ALSA-2026:88188", "field": "modified"}, {"timestamp": "2026-10-23T19:32:50Z", "date_only": false, "value": "2026-10-23T19:32:50Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88189", "record": "ALSA-2026:88189", "field": "modified"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12260-1", "record": "OPENSUSE-SU-2026:12260-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12262-1", "record": "OPENSUSE-SU-2026:12262-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12264-1", "record": "OPENSUSE-SU-2026:12264-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12260-1", "record": "OPENSUSE-SU-2026:12260-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12262-1", "record": "OPENSUSE-SU-2026:12262-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12264-1", "record": "OPENSUSE-SU-2026:12264-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12260-1", "record": "OPENSUSE-SU-2026:12260-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12262-1", "record": "OPENSUSE-SU-2026:12262-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12264-1", "record": "OPENSUSE-SU-2026:12264-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12260-1", "record": "OPENSUSE-SU-2026:12260-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12262-1", "record": "OPENSUSE-SU-2026:12262-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12264-1", "record": "OPENSUSE-SU-2026:12264-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T00:36:33.227Z", "date_only": false, "value": "2026-10-24T00:36:33.227253Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YN76474", "record": "CLEANSTART-2026-YN76474", "field": "published"}, {"timestamp": "2026-10-24T00:43:08Z", "date_only": false, "value": "2026-10-24T00:43:08Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:88280", "record": "ALSA-2026:88280", "field": "modified"}, {"timestamp": "2026-10-24T02:14:34Z", "date_only": false, "value": "2026-10-24T02:14:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/259004", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "ba930b85-cbe3-44bc-b0a0-f01149422c88", "content": "How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)\nhttps://ift.tt/kJyQDgl", "url": "https://t.me/ctinow/259004"}, {"timestamp": "2026-10-24T04:46:41Z", "date_only": false, "value": "2026-10-24T04:46:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T04:46:41Z", "date_only": false, "value": "2026-10-24T04:46:41+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-24T04:46:41Z", "date_only": false, "value": "2026-10-24T04:46:41+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T04:46:45Z", "date_only": false, "value": "2026-10-24T04:46:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:11:53Z", "date_only": false, "value": "2026-10-24T08:11:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T08:11:53Z", "date_only": false, "value": "2026-10-24T08:11:53+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-24T08:11:53Z", "date_only": false, "value": "2026-10-24T08:11:53+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T08:11:56Z", "date_only": false, "value": "2026-10-24T08:11:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:49:23Z", "date_only": false, "value": "2026-10-24T08:49:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12236-1", "record": "OPENSUSE-SU-2026:12236-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:49:23Z", "date_only": false, "value": "2026-10-24T08:49:23Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12236-1", "record": "OPENSUSE-SU-2026:12236-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-24T08:49:27Z", "date_only": false, "value": "2026-10-24T08:49:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12238-1", "record": "OPENSUSE-SU-2026:12238-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:49:27Z", "date_only": false, "value": "2026-10-24T08:49:27Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12238-1", "record": "OPENSUSE-SU-2026:12238-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-24T08:49:29Z", "date_only": false, "value": "2026-10-24T08:49:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12239-1", "record": "OPENSUSE-SU-2026:12239-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:49:29Z", "date_only": false, "value": "2026-10-24T08:49:29Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12239-1", "record": "OPENSUSE-SU-2026:12239-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-24T08:49:53Z", "date_only": false, "value": "2026-10-24T08:49:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12253-1", "record": "OPENSUSE-SU-2026:12253-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T08:49:53Z", "date_only": false, "value": "2026-10-24T08:49:53Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12253-1", "record": "OPENSUSE-SU-2026:12253-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-24T16:23:41Z", "date_only": false, "value": "2026-10-24T16:23:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T16:23:41Z", "date_only": false, "value": "2026-10-24T16:23:41+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-24T16:23:41Z", "date_only": false, "value": "2026-10-24T16:23:41+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T16:23:44Z", "date_only": false, "value": "2026-10-24T16:23:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T20:43:05Z", "date_only": false, "value": "2026-10-24T20:43:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T20:43:05Z", "date_only": false, "value": "2026-10-24T20:43:05+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-24T20:43:05Z", "date_only": false, "value": "2026-10-24T20:43:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T20:43:08Z", "date_only": false, "value": "2026-10-24T20:43:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-25T13:25:58Z", "date_only": false, "value": "2026-10-25T13:25:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/yanpengfei-git/ce2275cacf6a9a7e52d3a1d9b09d930d", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "e890c32c-c877-4204-894d-4e3f5b24a293", "content": "# eMudhra / emSign CA certificate security incident (Oct 2026)\n\nTerse incident summary and remediation.\nCovers browsers, Python, Go, Node, Java, Docker, Ubuntu.\n\n## TL;DR\n\nThe private keys of eight eMudhra (emSign) intermediate CAs were compromised.\nThey were not stolen; they were generated in Apr 2025 with only single-byte P-384\nrandomness (`d` = 4, 56, 66, 115, 155, 156, 230, 237), so anyone can recover them\nfrom the public certificates in milliseconds.\nSix can mint TLS certs for any hostname, two are code signing.\nClients that still trust the chains accept forged certificates (MITM risk).\n\nBrowsers are protected.\nMost non-browser software is not, unless its trust store is updated to remove the\nroots or block the keys.\n**Update every CA bundle and rebuild every container image now.**\n\n## Incident facts\n\n- Apr 30, 2025: eight intermediates created in a ceremony; a bug in the key\n  generation script produces a second, weak key set on the HSM, and the wrong keys\n  end up in the CSRs.\n- May 2025: all eight are cross-signed by Sectigo's legacy `AAA Certificate Services`\n  root.\n- Oct 17, 2026: researcher \"Wayne\" reports it; Chrome and Firefox block the keys\n  within hours.\n- No TLS cert chaining to the six was ever logged to Certificate Transparency (CT),\n  so CT-enforcing browsers were protected throughout an ~17 month exposure window.\n\nRoots hosting the affected chains:\n\n| Root                         | Notes                                  |\n| ---------------------------- | -------------------------------------- |\n| emSign ECC Root CA - G3      | removed from Mozilla NSS 3.131.1       |\n| emSign Root TLS CA - G3      | direct issuer                          |\n| emSign Root CS CA - G3       | code signing, trusted by Windows       |\n| AAA Certificate Services     | Sectigo cross-signer (legacy Comodo)   |\n\n**Key nuance:** removing the emSign roots does not protect systems that still trust\n`AAA Certificate Services` for TLS (Debian/Ubuntu-based, Java `cacerts`).\nThere the cross-signed copies still verify.\nThose systems need a key-based (SPKI) block or revocation checking, not just a root\nremoval.\n\n## Browsers\n\nUsers just need to keep browsers and OSes updated; no manual action, no restart.\n\n| Browser | Protection | Ships with the browser? |\n| ------- | ---------- | ----------------------- |\n| Chrome  | CRLSet block by SPKI hash (Oct 17) + CT + root store v43 coming | yes, auto-pushed |\n| Firefox | OneCRL (Oct 17) + NSS 3.131.1 root removal + CT | yes, auto-pushed |\n| Safari  | Apple block (Oct 19) | macOS/iOS update |\n| Edge    | Microsoft block (Oct 20) via Windows Update | yes |\n| Android | block via Google Play Services (Oct 19) | yes |\n\nChrome and Firefox blocks match the *public key*, so they catch the Sectigo\ncross-signed copies too, and neither needed a browser restart.\nChrome/Firefox dropped `AAA Certificate Services` for websites back in Apr 2025.\n\nCaveats: Windows CryptoAPI only rejects the chains when revocation checking is\nswitched on (same for some older non-browser clients).\nOld Apple root lists (pre-iOS 26 / macOS 26) still carry `AAA Certificate Services`,\nso those chains matter for non-browser tools on older Apple OS versions.\n\n## Python\n\n| Package  | Fixed in   | Why                                    |\n| -------- | ---------- | -------------------------------------- |\n| certifi  | 2026.10.19 | removes emSign roots (GHSA-6q48-6c7w-9gw2) |\n| pip      | 26.2.2     | uses vendored certifi, cannot disable  |\n| uv       | 0.13.4     | with `UV_SYSTEM_CERTS=true`            |\n| sigstore | 4.5.1      |                                        |\n| pixi     | 0.82.1     |                                        |\n\n`pip` is the critical one.\nIt always loads its vendored certifi on top of the system store with no way to turn\nthat off, so OS-level distrust does **not** protect pip.\nOnly upgrading pip works.\n\nBootstrap a secure pip first (URL + SHA-256 verified), then upgrade everything else\nin each venv/container:\n\n```bash\npython -m pip install \"pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70\"\npython -m pip install --upgrade certifi uv\nUV_SYSTEM_CERTS=true uv self update\n```\n\nmacOS python.org installers bundle certifi, so update it there too.\nUntil CPython security releases fix the bundled pip (GH-159910), upgrade pip after\nevery fresh venv.\n\n## Go\n\n- CVE-2026-111943 (go/go#82345).\n- `crypto/x509` now refuses chains containing the eight compromised keys\n  (SHA-256 SPKI blocklist), on all paths including Darwin/Windows system verify.\n- Fixed: **Go 1.27.3**, **Go 1.26.10**. Older, unsupported releases get nothing.\n- Rebuild binaries and images with the new toolchain; old build artifacts stay\n  vulnerable.\n\n## Node.js\n\n- PR nodejs/node#66871: compiled-in SPKI blocklist (byte-identical to Go) + root\n  store update to NSS 3.131.1.\n- Fixed: **v26.12.1**, **v24.22.1**, **v22.23.4**.\n- Sessions resumed from before the upgrade are not re-verified until they time out,\n  so restart long-lived processes.\n\n## Java\n\nJava is uniquely exposed: it uses a static `cacerts` per JDK, has no CT enforcement,\nand revocation (OCSP/CRL) is off by default\n(`com.sun.net.ssl.checkRevocation=false`).\nOutbound HTTPS from HttpClient, Spring, OkHttp, Netty etc. with default settings\naccepts forged chains.\nTest any JDK with Mark Struberg's `CheckCompromisedCa.java` against the 12\n`*-emudhra.we-have-a-problem.com` test hosts.\n\n**The trap:** `cacerts` also contains `AAA Certificate Services` (`comodoaaaca`).\nSo *deleting the emSign roots is not enough* \u2014 the six `*-aaa-\u2026` cross-signed chains\nstill verify 100%.\nDeleting `comodoaaaca` too blocks them but breaks legitimate legacy Sectigo chains.\n\n**Proper fix:** append the 16 certificate SHA-256 hashes (8 keys x 2 issuers) to\n`$JAVA_HOME/lib/security/blocked.certs`.\nThe JVM checks this list during every chain validation (\"Untrusted certificate\")\nand it causes no collateral damage.\nThe full hash list is in Laforge's post (link below).\nDo it for every JDK (SDKMAN: loop over `~/.sdkman/candidates/java/*/`), then re-run\n`CheckCompromisedCa.java` to confirm all 12 connections are rejected.\n\n- GraalVM native images embed the trust config at build time \u2014 patch the host JDK,\n  then rebuild the binary.\n- Container images freeze `cacerts`/`blocked.certs` at build time \u2014 add a `RUN` step\n  appending the 16 hashes, or wait for an updated base image (Temurin, Corretto,\n  Zulu, Temurin/Chainguard).\n\n## Docker / containers\n\nRebuild images from updated base images; a patched host does not fix last month's\nimage.\n\n- Official Python images for 3.11/3.12 still ship a pip that trusts the chain\n  (pip < 26.2.2); upgrade pip inside the image or use newer tags.\n- Node/golang official images are Debian-based and carry `AAA Certificate Services`;\n  the Node runtime SPKI block protects the process, but image tools (curl, wget,\n  git) still need updated `ca-certificates`.\n\nVerify clients against the disclosure test hosts (curl fails = protected):\n\n```bash\ncurl -v https://dv-g3b-emudhra.we-have-a-problem.com/\ncurl -v https://dv-g3b-aaa-emudhra.we-have-a-problem.com/\n```\n\n## Ubuntu\n\n`ca-certificates` removes `emSign Root TLS CA - G3` and `Comodo AAA Certificate\nServices` (USN-8944-1/2).\n\n| Release        | Fixed version                        |\n| -------------- | ------------------------------------ |\n| 14.04/16.04/18.04/20.04 | ESM via Ubuntu Pro (see USN) |\n| Jammy 22.04    | 20260816ubuntu0.22.04.1              |\n| Noble 24.04    | 20260816ubuntu0.24.04.1              |\n| Resolute 26.04 | 20260816ubuntu0.26.04.1              |\n| Stonking 26.10 | 20260816ubuntu0.26.10.1              |\n\n```bash\nsudo apt update && sudo apt upgrade\n# or targeted:\nsudo apt update && sudo apt install --only-upgrade ca-certificates\n```\n\nDesktop browsers are snaps and ignore the system store; refresh snaps if updates are\noff.\n\n## Other bundles\n\n| Component                | Fixed in                                   |\n| ------------------------ | ------------------------------------------ |\n| Debian ca-certificates   | 20250419~deb12u2 / +deb13u1 / 20260816+nmu1|\n| Alpine / Fedora / Arch   | 20261020-r0 / 2026.2.92_v9.0.319 / 3.131.1-1 |\n| Chainguard / NSS / curl  | 20260909-r3 / 3.131.1 / 2026-10-20         |\n| Rust rustls-webpki       | 0.103.16; webpki-roots 1.0.10              |\n| Electron                 | 44.9.1, 43.8.1, 42.11.16                   |\n| PHP composer/ca-bundle   | 1.4.16, 1.6.0                              |\n| Elixir castore / Perl Mozilla::CA | 1.0.22 / 20261020                 |\n\n**Hidden trust stores:** some libraries ship their own frozen PEM instead of a\nbundle package (Python HTTP clients as fallback, Ruby gems with 11-year-old lists).\nScan for the affected root fingerprints\n(SHA-256: AAA Certificate Services `D7A7A0FB\u20269EF4`, emSign ECC Root `86A1ECBA\u2026BE6B`,\nemSign Root TLS `7DD78D5F\u20266ED8D`, emSign Root CS `F2EDAAFF\u202634A5`):\n\n```bash\nAFFECTED='D7A7A0FB5D7E2731D771E9484EBCDEF71D5F0C3E0A2948782BC83EE0EA699EF4\n86A1ECBA089C4A8D3BBE2734C612BA341D813E043CF9E8A862CD5C57A36BBE6B\n7DD78D5F4F13459A83DFF9ABBBA62EDBAF6F2D102BF257FD712F4D9F2746ED8D\nF2EDAAFF3D9B701FB4D14C9F285F8C0BAD90FC3BCC1FA07D47F4718EDABA34A5'\nawk '/BEGIN CERT/{n++} n{print > (\"c\" n \".pem\")}' bundle.pem\nfor c in c*.pem; do fp=$(openssl x509 -in \"$c\" -noout -fingerprint -sha256 | cut -d= -f2 | tr -d ':'); grep -qx \"$fp\" <<<\"$AFFECTED\" && echo \"AFFECTED $c\"; done\n```\n\n## Enterprise notes\n\nNot a product code vulnerability, but every dev toolchain and build pipeline is\naffected:\n\n1. Update pip/certifi, rebuild venvs, containers, CI runners.\n2. This WSL's system Python certifi is still 2023.11.17 (vulnerable) \u2014 bootstrap pip.\n3. Java needs the `blocked.certs` step per JDK until vendors ship patched builds.\n4. IoT/frozen-firmware devices cannot be fixed; they stay exposed (chains expire\n   ~Jul 2039). Inventory them.\n5. Old Ubuntu needs Ubuntu Pro/ESM for the fix. Track via SCA\n   (Endor Labs tags bundled stores under CVE-2026-111943).\n\n## Sources\n\n- Disclosure site (signatures, chains, test hosts): [emudhra.we-have-a-problem.com](https://emudhra.we-have-a-problem.com/)\n- Mozilla disclosure + Chrome Root Program response: [dev-security-policy thread](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ)\n- Incident tracker / eMudhra root-cause account: [Mozilla bug 2083449](https://bugzilla.mozilla.org/show_bug.cgi?id=2083449)\n- Python packaging advisory: [discuss.python.org thread](https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576/)\n- certifi advisory: [GHSA-6q48-6c7w-9gw2](https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2)\n- Go: [CVE-2026-111943 / go issue 82345](https://go.dev/issue/82345)\n- Node.js: [PR #66871](https://github.com/nodejs/node/pull/66871)\n- Java/JVM: [\u201cWhy Your JVM Is Vulnerable\u201d (G. Laforge)](https://glaforge.dev/posts/2026/10/21/the-emudhra-ca-compromise-why-your-jvm-is-vulnerable-and-how-to-fix-it/)\n- Ubuntu: [\u201ceMudhra CA compromise fixes available\u201d](https://ubuntu.com/blog/emudhra-ca-compromise-fixes-available) / [USN-8944-1](https://ubuntu.com/security/notices/USN-8944-1)\n- Red Hat: [RHSB-2026-012](https://access.redhat.com/security/vulnerabilities/RHSB-2026-012)\n- Scott Helme: [\u201cEight Bits of Trust\u201d](https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/)\n- Endor Labs: [trust-store analysis](https://www.endorlabs.com/learn/emudhra-intermediate-ca-compromise-the-trust-stores-you-patched-and-the-ones-you-didnt-know-you-had)\n- Recap: [The Hacker News](https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html)\n", "url": "https://gist.github.com/yanpengfei-git/ce2275cacf6a9a7e52d3a1d9b09d930d"}, {"timestamp": "2026-10-25T21:23:24.500Z", "date_only": false, "value": "2026-10-25T21:23:24.500802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cirriustech.co.uk/post/3myq5de7jq22m", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "e1afeb49-b1b5-4ad9-b854-86fc475c7cf2", "content": "cARL users: v1.0.2 is out now which is a security release to patch Go (cARL CLI) to FIX CVE-2026-111943 in Go (eMhudra/emSign TLS/SSL Weak Private Keys).\n\nHomebrew, And all prebuilt binaries are available now and Winget PR is in flight.\n\ngithub.com/goldjg/cARL/...", "url": "https://bsky.app/profile/cirriustech.co.uk/post/3myq5de7jq22m"}, {"timestamp": "2026-10-25T21:27:46.624Z", "date_only": false, "value": "2026-10-25T21:27:46.624733Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cirriustech.co.uk/post/3myq5l7b7u22m", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "1d718ae4-0588-44ba-b267-816f39353331", "content": "cARL users: v1.0.2 is out now which is a security release to patch Go (cARL CLI) to FIX CVE-2026-111943 in Go (crypto/x509 certificate trust decisions, specifically distrusting compromised CA intermediates).\n\nHomebrew, And all prebuilt binaries are available now and Winget PR is in flight.", "url": "https://bsky.app/profile/cirriustech.co.uk/post/3myq5l7b7u22m"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:89744", "record": "RHSA-2026:89744", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:89752", "record": "RHSA-2026:89752", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:89761", "record": "RHSA-2026:89761", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:89744", "record": "RHSA-2026:89744", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:89752", "record": "RHSA-2026:89752", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:89761", "record": "RHSA-2026:89761", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:89744", "record": "RHSA-2026:89744", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:89752", "record": "RHSA-2026:89752", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:89761", "record": "RHSA-2026:89761", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "last_revision_date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "initial_release_date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:89744", "record": "RHSA-2026:89744", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:89752", "record": "RHSA-2026:89752", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:89761", "record": "RHSA-2026:89761", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:89744", "record": "ALSA-2026:89744", "field": "published"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:89760", "record": "ALSA-2026:89760", "field": "published"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:89761", "record": "ALSA-2026:89761", "field": "published"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-26T02:35:34Z", "date_only": false, "value": "2026-10-26T02:35:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T02:35:34Z", "date_only": false, "value": "2026-10-26T02:35:34+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T02:35:34Z", "date_only": false, "value": "2026-10-26T02:35:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T03:10:17Z", "date_only": false, "value": "2026-10-26T03:10:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T03:10:17Z", "date_only": false, "value": "2026-10-26T03:10:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T03:10:17Z", "date_only": false, "value": "2026-10-26T03:10:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T03:26:20Z", "date_only": false, "value": "2026-10-26T03:26:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T03:26:20Z", "date_only": false, "value": "2026-10-26T03:26:20+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T03:26:20Z", "date_only": false, "value": "2026-10-26T03:26:20+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T04:35:02Z", "date_only": false, "value": "2026-10-26T04:35:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T04:35:02Z", "date_only": false, "value": "2026-10-26T04:35:02+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T04:35:02Z", "date_only": false, "value": "2026-10-26T04:35:02+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T08:49:03Z", "date_only": false, "value": "2026-10-26T08:49:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T08:49:03Z", "date_only": false, "value": "2026-10-26T08:49:03+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T08:49:03Z", "date_only": false, "value": "2026-10-26T08:49:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T09:47:45Z", "date_only": false, "value": "2026-10-26T09:47:45Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:89760", "record": "ALSA-2026:89760", "field": "modified"}, {"timestamp": "2026-10-26T09:56:07Z", "date_only": false, "value": "2026-10-26T09:56:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T09:56:07Z", "date_only": false, "value": "2026-10-26T09:56:07+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T09:56:07Z", "date_only": false, "value": "2026-10-26T09:56:07+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T10:34:56Z", "date_only": false, "value": "2026-10-26T10:34:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T10:34:56Z", "date_only": false, "value": "2026-10-26T10:34:56+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T10:34:56Z", "date_only": false, "value": "2026-10-26T10:34:56+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T10:35:09Z", "date_only": false, "value": "2026-10-26T10:35:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12260-1", "record": "OPENSUSE-SU-2026:12260-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T10:35:09Z", "date_only": false, "value": "2026-10-26T10:35:09Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12260-1", "record": "OPENSUSE-SU-2026:12260-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T10:35:13Z", "date_only": false, "value": "2026-10-26T10:35:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12262-1", "record": "OPENSUSE-SU-2026:12262-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T10:35:13Z", "date_only": false, "value": "2026-10-26T10:35:13Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12262-1", "record": "OPENSUSE-SU-2026:12262-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T10:35:16Z", "date_only": false, "value": "2026-10-26T10:35:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12264-1", "record": "OPENSUSE-SU-2026:12264-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T10:35:16Z", "date_only": false, "value": "2026-10-26T10:35:16Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12264-1", "record": "OPENSUSE-SU-2026:12264-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T10:35:17Z", "date_only": false, "value": "2026-10-26T10:35:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T10:35:17Z", "date_only": false, "value": "2026-10-26T10:35:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T10:35:17Z", "date_only": false, "value": "2026-10-26T10:35:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T10:36:51Z", "date_only": false, "value": "2026-10-26T10:36:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T10:36:51Z", "date_only": false, "value": "2026-10-26T10:36:51+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T10:36:51Z", "date_only": false, "value": "2026-10-26T10:36:51+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T11:19:40Z", "date_only": false, "value": "2026-10-26T11:19:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T11:19:40Z", "date_only": false, "value": "2026-10-26T11:19:40+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T11:19:40Z", "date_only": false, "value": "2026-10-26T11:19:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T12:01:16.742Z", "date_only": false, "value": "2026-10-26T12:01:16.742133Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:89760", "record": "RLSA-2026:89760", "field": "published"}, {"timestamp": "2026-10-26T12:12:20.032Z", "date_only": false, "value": "2026-10-26T12:12:20.032264Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:86203", "record": "RLSA-2026:86203", "field": "modified"}, {"timestamp": "2026-10-26T12:12:22.869Z", "date_only": false, "value": "2026-10-26T12:12:22.869723Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88188", "record": "RLSA-2026:88188", "field": "modified"}, {"timestamp": "2026-10-26T12:12:22.906Z", "date_only": false, "value": "2026-10-26T12:12:22.906335Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88189", "record": "RLSA-2026:88189", "field": "modified"}, {"timestamp": "2026-10-26T12:12:26.907Z", "date_only": false, "value": "2026-10-26T12:12:26.907062Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:89760", "record": "RLSA-2026:89760", "field": "modified"}, {"timestamp": "2026-10-26T12:12:33.759Z", "date_only": false, "value": "2026-10-26T12:12:33.759307Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:86093", "record": "RLSA-2026:86093", "field": "modified"}, {"timestamp": "2026-10-26T12:12:34.189Z", "date_only": false, "value": "2026-10-26T12:12:34.189942Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88262", "record": "RLSA-2026:88262", "field": "modified"}, {"timestamp": "2026-10-26T12:12:34.224Z", "date_only": false, "value": "2026-10-26T12:12:34.224993Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88280", "record": "RLSA-2026:88280", "field": "modified"}, {"timestamp": "2026-10-26T12:12:34.262Z", "date_only": false, "value": "2026-10-26T12:12:34.262134Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88316", "record": "RLSA-2026:88316", "field": "modified"}, {"timestamp": "2026-10-26T12:12:34.303Z", "date_only": false, "value": "2026-10-26T12:12:34.303739Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88336", "record": "RLSA-2026:88336", "field": "modified"}, {"timestamp": "2026-10-26T12:22:30Z", "date_only": false, "value": "2026-10-26T12:22:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T12:22:30Z", "date_only": false, "value": "2026-10-26T12:22:30+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T12:22:30Z", "date_only": false, "value": "2026-10-26T12:22:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T13:24:00Z", "date_only": false, "value": "2026-10-26T13:24:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T13:24:00Z", "date_only": false, "value": "2026-10-26T13:24:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T13:24:00Z", "date_only": false, "value": "2026-10-26T13:24:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T13:35:02.962Z", "date_only": false, "value": "2026-10-26T13:35:02.962505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3myrtmttltr2y", "record": "CVE-2026-111943", "field": "creation_timestamp", "uuid": "5347e144-275f-4ce4-9e26-e535ebe1a962", "content": "CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles\nhttps://aws.amazon.com/security/security-bulletins/2026-150-aws/", "url": "https://bsky.app/profile/tech-trending.bsky.social/post/3myrtmttltr2y"}, {"timestamp": "2026-10-26T13:37:03Z", "date_only": false, "value": "2026-10-26T13:37:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T13:37:03Z", "date_only": false, "value": "2026-10-26T13:37:03+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T13:37:03Z", "date_only": false, "value": "2026-10-26T13:37:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T13:39:09Z", "date_only": false, "value": "2026-10-26T13:39:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T13:39:09Z", "date_only": false, "value": "2026-10-26T13:39:09+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T13:39:09Z", "date_only": false, "value": "2026-10-26T13:39:09+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T14:45:55Z", "date_only": false, "value": "2026-10-26T14:45:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T14:45:55Z", "date_only": false, "value": "2026-10-26T14:45:55+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T14:45:55Z", "date_only": false, "value": "2026-10-26T14:45:55+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T14:46:46Z", "date_only": false, "value": "2026-10-26T14:46:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T14:46:46Z", "date_only": false, "value": "2026-10-26T14:46:46+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T14:46:46Z", "date_only": false, "value": "2026-10-26T14:46:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T14:48:51.444Z", "date_only": false, "value": "2026-10-26T14:48:51.444368Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:86196", "record": "RLSA-2026:86196", "field": "modified"}, {"timestamp": "2026-10-26T14:48:53.167Z", "date_only": false, "value": "2026-10-26T14:48:53.167489Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:88354", "record": "RLSA-2026:88354", "field": "modified"}, {"timestamp": "2026-10-26T15:00:38Z", "date_only": false, "value": "2026-10-26T15:00:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T15:00:38Z", "date_only": false, "value": "2026-10-26T15:00:38+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T15:00:38Z", "date_only": false, "value": "2026-10-26T15:00:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T15:01:12Z", "date_only": false, "value": "2026-10-26T15:01:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T15:01:12Z", "date_only": false, "value": "2026-10-26T15:01:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T15:01:12Z", "date_only": false, "value": "2026-10-26T15:01:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T15:02:31Z", "date_only": false, "value": "2026-10-26T15:02:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T15:02:31Z", "date_only": false, "value": "2026-10-26T15:02:31+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-26T15:02:31Z", "date_only": false, "value": "2026-10-26T15:02:31+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T15:12:42Z", "date_only": false, "value": "2026-10-26T15:12:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:42Z", "date_only": false, "value": "2026-10-26T15:12:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:42Z", "date_only": false, "value": "2026-10-26T15:12:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:42Z", "date_only": false, "value": "2026-10-26T15:12:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:42Z", "date_only": false, "value": "2026-10-26T15:12:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:85899", "record": "RHSA-2026:85899", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:42Z", "date_only": false, "value": "2026-10-26T15:12:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86029", "record": "RHSA-2026:86029", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:43Z", "date_only": false, "value": "2026-10-26T15:12:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:43Z", "date_only": false, "value": "2026-10-26T15:12:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:43Z", "date_only": false, "value": "2026-10-26T15:12:43+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:43Z", "date_only": false, "value": "2026-10-26T15:12:43+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:43Z", "date_only": false, "value": "2026-10-26T15:12:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:86093", "record": "RHSA-2026:86093", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:43Z", "date_only": false, "value": "2026-10-26T15:12:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:86196", "record": "RHSA-2026:86196", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:86203", "record": "RHSA-2026:86203", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86733", "record": "RHSA-2026:86733", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:44Z", "date_only": false, "value": "2026-10-26T15:12:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86738", "record": "RHSA-2026:86738", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:45Z", "date_only": false, "value": "2026-10-26T15:12:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:45Z", "date_only": false, "value": "2026-10-26T15:12:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:45Z", "date_only": false, "value": "2026-10-26T15:12:45+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:45Z", "date_only": false, "value": "2026-10-26T15:12:45+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:45Z", "date_only": false, "value": "2026-10-26T15:12:45+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86776", "record": "RHSA-2026:86776", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:45Z", "date_only": false, "value": "2026-10-26T15:12:45+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86839", "record": "RHSA-2026:86839", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:46Z", "date_only": false, "value": "2026-10-26T15:12:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:46Z", "date_only": false, "value": "2026-10-26T15:12:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:46Z", "date_only": false, "value": "2026-10-26T15:12:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:46Z", "date_only": false, "value": "2026-10-26T15:12:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:46Z", "date_only": false, "value": "2026-10-26T15:12:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86863", "record": "RHSA-2026:86863", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:46Z", "date_only": false, "value": "2026-10-26T15:12:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86886", "record": "RHSA-2026:86886", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86893", "record": "RHSA-2026:86893", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86906", "record": "RHSA-2026:86906", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86908", "record": "RHSA-2026:86908", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:47Z", "date_only": false, "value": "2026-10-26T15:12:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86914", "record": "RHSA-2026:86914", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86812", "record": "RHSA-2026:86812", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86858", "record": "RHSA-2026:86858", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86918", "record": "RHSA-2026:86918", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:48Z", "date_only": false, "value": "2026-10-26T15:12:48+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86922", "record": "RHSA-2026:86922", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86867", "record": "RHSA-2026:86867", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86927", "record": "RHSA-2026:86927", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86928", "record": "RHSA-2026:86928", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:49Z", "date_only": false, "value": "2026-10-26T15:12:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86929", "record": "RHSA-2026:86929", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86930", "record": "RHSA-2026:86930", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86932", "record": "RHSA-2026:86932", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86934", "record": "RHSA-2026:86934", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:50Z", "date_only": false, "value": "2026-10-26T15:12:50+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86936", "record": "RHSA-2026:86936", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86939", "record": "RHSA-2026:86939", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86943", "record": "RHSA-2026:86943", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86944", "record": "RHSA-2026:86944", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:51Z", "date_only": false, "value": "2026-10-26T15:12:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86946", "record": "RHSA-2026:86946", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86948", "record": "RHSA-2026:86948", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86949", "record": "RHSA-2026:86949", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:52Z", "date_only": false, "value": "2026-10-26T15:12:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86952", "record": "RHSA-2026:86952", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86956", "record": "RHSA-2026:86956", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86958", "record": "RHSA-2026:86958", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86960", "record": "RHSA-2026:86960", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86972", "record": "RHSA-2026:86972", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:53Z", "date_only": false, "value": "2026-10-26T15:12:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86973", "record": "RHSA-2026:86973", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86938", "record": "RHSA-2026:86938", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86977", "record": "RHSA-2026:86977", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:54Z", "date_only": false, "value": "2026-10-26T15:12:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86978", "record": "RHSA-2026:86978", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86987", "record": "RHSA-2026:86987", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86990", "record": "RHSA-2026:86990", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:86992", "record": "RHSA-2026:86992", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:55Z", "date_only": false, "value": "2026-10-26T15:12:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87008", "record": "RHSA-2026:87008", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87028", "record": "RHSA-2026:87028", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87040", "record": "RHSA-2026:87040", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87041", "record": "RHSA-2026:87041", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:56Z", "date_only": false, "value": "2026-10-26T15:12:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87042", "record": "RHSA-2026:87042", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:87043", "record": "RHSA-2026:87043", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87024", "record": "RHSA-2026:87024", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87053", "record": "RHSA-2026:87053", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:57Z", "date_only": false, "value": "2026-10-26T15:12:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87065", "record": "RHSA-2026:87065", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:58Z", "date_only": false, "value": "2026-10-26T15:12:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:58Z", "date_only": false, "value": "2026-10-26T15:12:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:58Z", "date_only": false, "value": "2026-10-26T15:12:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87075", "record": "RHSA-2026:87075", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87076", "record": "RHSA-2026:87076", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87092", "record": "RHSA-2026:87092", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87153", "record": "RHSA-2026:87153", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:12:59Z", "date_only": false, "value": "2026-10-26T15:12:59+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87732", "record": "RHSA-2026:87732", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87029", "record": "RHSA-2026:87029", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87911", "record": "RHSA-2026:87911", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:00Z", "date_only": false, "value": "2026-10-26T15:13:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88187", "record": "RHSA-2026:88187", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:01Z", "date_only": false, "value": "2026-10-26T15:13:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:01Z", "date_only": false, "value": "2026-10-26T15:13:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:01Z", "date_only": false, "value": "2026-10-26T15:13:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:01Z", "date_only": false, "value": "2026-10-26T15:13:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:01Z", "date_only": false, "value": "2026-10-26T15:13:01+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88188", "record": "RHSA-2026:88188", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:01Z", "date_only": false, "value": "2026-10-26T15:13:01+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88189", "record": "RHSA-2026:88189", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88262", "record": "RHSA-2026:88262", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88280", "record": "RHSA-2026:88280", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:02Z", "date_only": false, "value": "2026-10-26T15:13:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88316", "record": "RHSA-2026:88316", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88336", "record": "RHSA-2026:88336", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88317", "record": "RHSA-2026:88317", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:03Z", "date_only": false, "value": "2026-10-26T15:13:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88332", "record": "RHSA-2026:88332", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:04Z", "date_only": false, "value": "2026-10-26T15:13:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:04Z", "date_only": false, "value": "2026-10-26T15:13:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:04Z", "date_only": false, "value": "2026-10-26T15:13:04+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:88354", "record": "RHSA-2026:88354", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:05Z", "date_only": false, "value": "2026-10-26T15:13:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:05Z", "date_only": false, "value": "2026-10-26T15:13:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:05Z", "date_only": false, "value": "2026-10-26T15:13:05+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:05Z", "date_only": false, "value": "2026-10-26T15:13:05+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:05Z", "date_only": false, "value": "2026-10-26T15:13:05+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88396", "record": "RHSA-2026:88396", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:05Z", "date_only": false, "value": "2026-10-26T15:13:05+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88397", "record": "RHSA-2026:88397", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:07Z", "date_only": false, "value": "2026-10-26T15:13:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:07Z", "date_only": false, "value": "2026-10-26T15:13:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:07Z", "date_only": false, "value": "2026-10-26T15:13:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:07Z", "date_only": false, "value": "2026-10-26T15:13:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:07Z", "date_only": false, "value": "2026-10-26T15:13:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89740", "record": "RHSA-2026:89740", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:07Z", "date_only": false, "value": "2026-10-26T15:13:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89741", "record": "RHSA-2026:89741", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:08Z", "date_only": false, "value": "2026-10-26T15:13:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:08Z", "date_only": false, "value": "2026-10-26T15:13:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:08Z", "date_only": false, "value": "2026-10-26T15:13:08+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89751", "record": "RHSA-2026:89751", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:09Z", "date_only": false, "value": "2026-10-26T15:13:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:09Z", "date_only": false, "value": "2026-10-26T15:13:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:09Z", "date_only": false, "value": "2026-10-26T15:13:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89832", "record": "RHSA-2026:89832", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89885", "record": "RHSA-2026:89885", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89888", "record": "RHSA-2026:89888", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:10Z", "date_only": false, "value": "2026-10-26T15:13:10+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89892", "record": "RHSA-2026:89892", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:11Z", "date_only": false, "value": "2026-10-26T15:13:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:11Z", "date_only": false, "value": "2026-10-26T15:13:11+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:11Z", "date_only": false, "value": "2026-10-26T15:13:11+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89908", "record": "RHSA-2026:89908", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89920", "record": "RHSA-2026:89920", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89921", "record": "RHSA-2026:89921", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:12Z", "date_only": false, "value": "2026-10-26T15:13:12+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89922", "record": "RHSA-2026:89922", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:13Z", "date_only": false, "value": "2026-10-26T15:13:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:13Z", "date_only": false, "value": "2026-10-26T15:13:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:13Z", "date_only": false, "value": "2026-10-26T15:13:13+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:13Z", "date_only": false, "value": "2026-10-26T15:13:13+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:13Z", "date_only": false, "value": "2026-10-26T15:13:13+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89760", "record": "RHSA-2026:89760", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:13Z", "date_only": false, "value": "2026-10-26T15:13:13+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89914", "record": "RHSA-2026:89914", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:14Z", "date_only": false, "value": "2026-10-26T15:13:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:14Z", "date_only": false, "value": "2026-10-26T15:13:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:14Z", "date_only": false, "value": "2026-10-26T15:13:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:14Z", "date_only": false, "value": "2026-10-26T15:13:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:14Z", "date_only": false, "value": "2026-10-26T15:13:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89915", "record": "RHSA-2026:89915", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:14Z", "date_only": false, "value": "2026-10-26T15:13:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89926", "record": "RHSA-2026:89926", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:15Z", "date_only": false, "value": "2026-10-26T15:13:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:15Z", "date_only": false, "value": "2026-10-26T15:13:15+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:15Z", "date_only": false, "value": "2026-10-26T15:13:15+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89884", "record": "RHSA-2026:89884", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T15:13:17Z", "date_only": false, "value": "2026-10-26T15:13:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T15:13:17Z", "date_only": false, "value": "2026-10-26T15:13:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T15:13:17Z", "date_only": false, "value": "2026-10-26T15:13:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89925", "record": "RHSA-2026:89925", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T16:43:09Z", "date_only": false, "value": "2026-10-26T16:43:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T16:43:09Z", "date_only": false, "value": "2026-10-26T16:43:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T16:43:09Z", "date_only": false, "value": "2026-10-26T16:43:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89031", "record": "RHSA-2026:89031", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T16:43:11Z", "date_only": false, "value": "2026-10-26T16:43:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T16:43:11Z", "date_only": false, "value": "2026-10-26T16:43:11+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T16:43:11Z", "date_only": false, "value": "2026-10-26T16:43:11+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89081", "record": "RHSA-2026:89081", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:53Z", "date_only": false, "value": "2026-10-26T17:58:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:53Z", "date_only": false, "value": "2026-10-26T17:58:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:53Z", "date_only": false, "value": "2026-10-26T17:58:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87246", "record": "RHSA-2026:87246", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:54Z", "date_only": false, "value": "2026-10-26T17:58:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:54Z", "date_only": false, "value": "2026-10-26T17:58:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:54Z", "date_only": false, "value": "2026-10-26T17:58:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:87245", "record": "RHSA-2026:87245", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:55Z", "date_only": false, "value": "2026-10-26T17:58:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:55Z", "date_only": false, "value": "2026-10-26T17:58:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:55Z", "date_only": false, "value": "2026-10-26T17:58:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88340", "record": "RHSA-2026:88340", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:56Z", "date_only": false, "value": "2026-10-26T17:58:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:56Z", "date_only": false, "value": "2026-10-26T17:58:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:56Z", "date_only": false, "value": "2026-10-26T17:58:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88394", "record": "RHSA-2026:88394", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:57Z", "date_only": false, "value": "2026-10-26T17:58:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:57Z", "date_only": false, "value": "2026-10-26T17:58:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:57Z", "date_only": false, "value": "2026-10-26T17:58:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:57Z", "date_only": false, "value": "2026-10-26T17:58:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:57Z", "date_only": false, "value": "2026-10-26T17:58:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88395", "record": "RHSA-2026:88395", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:57Z", "date_only": false, "value": "2026-10-26T17:58:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89041", "record": "RHSA-2026:89041", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:89131", "record": "RHSA-2026:89131", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:90329", "record": "RHSA-2026:90329", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:58:58Z", "date_only": false, "value": "2026-10-26T17:58:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:90332", "record": "RHSA-2026:90332", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T17:59:00Z", "date_only": false, "value": "2026-10-26T17:59:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T17:59:00Z", "date_only": false, "value": "2026-10-26T17:59:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T17:59:00Z", "date_only": false, "value": "2026-10-26T17:59:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88339", "record": "RHSA-2026:88339", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T19:16:30Z", "date_only": false, "value": "2026-10-26T19:16:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:89744", "record": "RHSA-2026:89744", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T19:16:30Z", "date_only": false, "value": "2026-10-26T19:16:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:89744", "record": "RHSA-2026:89744", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T19:16:39Z", "date_only": false, "value": "2026-10-26T19:16:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:89752", "record": "RHSA-2026:89752", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T19:16:39Z", "date_only": false, "value": "2026-10-26T19:16:39Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:89752", "record": "RHSA-2026:89752", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T19:16:45Z", "date_only": false, "value": "2026-10-26T19:16:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:89761", "record": "RHSA-2026:89761", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T19:16:45Z", "date_only": false, "value": "2026-10-26T19:16:45Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:89761", "record": "RHSA-2026:89761", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T19:21:01Z", "date_only": false, "value": "2026-10-26T19:21:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:24359-1", "record": "SUSE-SU-2026:24359-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T19:21:01Z", "date_only": false, "value": "2026-10-26T19:21:01Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:24359-1", "record": "SUSE-SU-2026:24359-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T19:21:02Z", "date_only": false, "value": "2026-10-26T19:21:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:24360-1", "record": "SUSE-SU-2026:24360-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T19:21:02Z", "date_only": false, "value": "2026-10-26T19:21:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:24360-1", "record": "SUSE-SU-2026:24360-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T19:23:34Z", "date_only": false, "value": "2026-10-26T19:23:34Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:89744", "record": "ALSA-2026:89744", "field": "modified"}, {"timestamp": "2026-10-26T19:44:18Z", "date_only": false, "value": "2026-10-26T19:44:18Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:89761", "record": "ALSA-2026:89761", "field": "modified"}]}